> ## Documentation Index > Fetch the complete documentation index at: https://seal-d2ca5bea.mintlify.site/llms.txt > Use this file to discover all available pages before exploring further. # Infrastructure > Seal's hosting, security, and compliance overview. Seal is a fully managed cloud platform hosted on Google Cloud Platform. There is no on-premise infrastructure to manage—Seal handles hosting, security, maintenance, and updates. Seal cloud infrastructure showing browser and API clients connecting to the Seal application in a private Google Cloud VPC with database and file storage. ## Your environment Seal runs in your web browser and integrates with your local equipment. Barcode scanners connect via Bluetooth, and printing uses your existing network printers. For automated data capture from lab instruments, the optional Seal IoT Agent runs on a local computer. Local equipment connectivity showing scanners, browsers, printers, instruments, and the Seal IoT Agent connecting to the Seal platform. ## Security & compliance | | | | ------------------------- | ---------------------------------------------------------- | | **Hosting** | Google Cloud Platform (SOC 2 Type II, ISO 27001 certified) | | **Seal certification** | SOC 2 Type II | | **Encryption in transit** | TLS 1.2+ (all connections) | | **Encryption at rest** | AES-256 (database and file storage) | | **Network isolation** | Private VPC with no public database access | | **Backups** | Automated daily backups with point-in-time recovery | ## Hybrid deployment For organisations with large on-premises data sets, data sovereignty requirements, or existing HPC infrastructure, Seal supports hybrid deployment — where the application runs in the cloud while specific data workflows stay on local infrastructure. See [Hybrid deployment](/it-and-security-policies/hybrid-deployment) for details. ## Data streaming Seal supports real-time streaming of raw data to external data warehouses via [Estuary](https://estuary.dev/), including direct Snowflake integration. Contact support to configure data streaming for your organisation. ## Data residency | Region | Default location | | ------ | ---------------------- | | **EU** | Belgium (europe-west1) | | **US** | Iowa (us-central1) | Your hosting region is assigned during onboarding. Alternative GCP regions can be provisioned on request to meet data sovereignty or latency requirements. ## What you may need IT support with Seal is a fully managed cloud platform—we handle hosting, security, and maintenance. You access Seal through your web browser, so there's nothing to install or maintain on your end. If your organisation has specific IT policies, you may need assistance with: 1. **SSO setup** (if required) — See [Single sign-on](/it-and-security-policies/single-sign-on) 2. **URL allowlisting** (if required) — Add `*.seal.run` to your allowlist 3. **IoT integration** (if required) — Contact support for IP allowlisting 4. **Network printers** — Static IP addresses for printers to ensure consistent connectivity 5. **Security documentation** — IT may request our security policies and certifications. See our [Security Portal](https://trust.seal.run/) or [Data storage and security](/it-and-security-policies/data-storage-and-security) ## Further documentation * [Data storage and security](/it-and-security-policies/data-storage-and-security) * [Data backup and disaster recovery](/it-and-security-policies/data-backup-and-disaster-recovery) * [AI policy](/it-and-security-policies/ai-policy)