The providers underneath the platform.
Performance Hub is built on independently certified cloud and edge infrastructure. This page lists the providers the platform runs on, the role each plays, and the certifications they hold, so you can verify the foundation your deployment sits on.
Core infrastructure providers.
Amazon Web Services - cloud services
Performance Hub's cloud services run on AWS. AWS holds certification for compliance across the major global security and privacy standards, including ISO/IEC 27001:2022, 27017:2015, 27018:2019 and 27701:2019, SOC 1/2/3 reports, and CSA STAR CCM v4.0. These certifications apply to the AWS regions and services Performance Hub is built on. Source: AWS compliance.
Wasabi - backup and footage storage
Encrypted backups and video footage are stored with Wasabi hot cloud storage, hosted in Tier IV data centre facilities certified for SOC 2 and ISO/IEC 27001, with 24/7 on-site security, biometric access controls and continuous monitoring. Wasabi also holds certifications for regulated workloads including HIPAA, FERPA and CJIS.
Important: backups and footage are encrypted on your device before they reach any storage provider, so the provider holds ciphertext only. The certifications above apply to the storage infrastructure, not to the contents of your data, which the storage provider cannot read. Source: Wasabi legal.
Balena - device management
The on-premise appliances at your facility are managed through Balena's fleet-management platform. Balena is ISO/IEC 27001:2022 certified, and its security controls are continuously and independently monitored. Balena's published sub-processors are AWS, Amplitude, Zendesk and Stripe. Source: Balena Trust Center.
Third-party services the platform integrates with.
Performance Hub also relies on a number of third-party services to operate:
- Payment processing - card payments are handled by payment gateway providers including Stripe. Performance Hub does not collect or hold credit card details.
- Cloud and authentication services - Google is used for cloud and authentication services.
- Messaging and communications - Twilio delivers messaging and communications.
- Application integrations for agents - Composio powers the application integrations available to agents.
- AI model providers and inference - model providers reachable through the Model Router process requests to generate responses, and you control which are enabled (see AI, models & responsible AI). In addition, Anthropic and Performance Hub's own internal models and inference power certain platform features, such as agentic security scanning of customer environments.
- Security testing - Trend Micro and Qualys are used for security scanning and penetration testing.
- Search - Algolia powers product-documentation search and some in-platform search. Customer data does not go into Algolia; search over customer data runs on Performance Hub's own search appliance, in the region you choose.
- Supplementary, on-demand compute - from time to time, providers including Microsoft Azure and Oracle are used for virtual agents and on-demand compute that sits outside the core platform.
The specific set of sub-processors can vary by configuration and over time. For a current, contractual list of sub-processors relevant to your deployment, contact us.
A precise framing.
These certifications belong to the infrastructure providers. They establish a certified foundation on which Performance Hub's own security controls - documented across this Trust Centre - operate. Performance Hub does not claim these certifications as its own.