Skip to main content
Root home page
Search...
⌘K
Ask AI
root.io
Contact Us
Contact Us
Search...
Navigation
Trust & Compliance
Trust Center
Getting Started
Welcome to Root
Quick Start
How Root Works
Authentication & Access
Root Image Catalog
Root Image Catalog Overview
Getting Started with RIC
Supported Images
Pulling Images
Root Patches for Images
Root Library Catalog
Root Library Catalog Overview
Getting Started with RLC
Root Patcher CLI
Python — pip, uv, Poetry
JavaScript — npm, pnpm, yarn
Java — Maven, Gradle
Root Patches for Packages
Core Concepts
Agentic Vulnerability Remediation (AVR)
Root Patches
Root Patches & Patch Stream
Vulnerability Statuses
Vulnerability Lifecycle
SBOMs
VEX Statements
Provenance
Registry Integrations
Registry Integrations Overview
Docker
Kubernetes
Amazon ECR Pull-Through Cache
JFrog Artifactory
pip
uv
Poetry
npm
pnpm
yarn
Maven
Gradle
Reports & Insights
Reports & Insights Overview
Vulnerability Reports
SBOM Reports
VEX Reports
Dashboard & Metrics
Reference
FAQ
API Reference
CLI Reference
Configuration Reference
Glossary
Changelog
Trust & Compliance
Trust & Compliance Overview
Security Posture
Certifications & Attestations
Trust Center
On this page
Sub-Processors
Data Residency
Data Retention
Security FAQ
Legal Documents
Trust & Compliance
Trust Center
Sub-processors, data residency, and security FAQ for procurement and legal reviews.
Root’s Trust Center provides the information procurement, legal, and security teams need to evaluate Root as a vendor.
Sub-Processors
[List of third-party sub-processors Root uses, their data processing roles, and locations coming soon]
Data Residency
[Where Root stores and processes data, region options for enterprise customers coming soon]
Data Retention
[How long Root retains registry pull logs and vulnerability data, deletion procedures coming soon]
Security FAQ
[Common questions from procurement and security teams — encryption, access controls, employee background checks, incident response coming soon]
Legal Documents
[Links to Terms of Service, Privacy Policy, Data Processing Agreement (DPA) coming soon]
Certifications & Attestations
⌘I
Assistant
Responses are generated using AI and may contain mistakes.