Infrastructure
Last reviewed: May 2026
User Intuition runs entirely on United States infrastructure: Railway hosts the application and API, Supabase hosts the database, authentication, and file storage — both in the US-East (Ohio) region — and Vercel hosts the marketing website. For critical-tier systems, User Intuition targets a 4-hour recovery time objective and a 1-hour recovery point objective, backed by continuous replication and automated failover, and verifies these targets with an annual continuity test. DDoS mitigation is applied at every edge of the stack.
Hosting architecture
User Intuition runs on three hosting providers, all in the United States:
- Railway — application, MCP server, and API hosting. US-East (Ohio).
- Supabase — database, authentication metadata, file storage. US-East (Ohio).
- Vercel — marketing website hosting. United States.
Both Railway and Supabase run on AWS underneath. The full sub-processor list is on our sub-processors page.
Change management
Production changes follow our internal Operations Change Control Policy. Standard changes are batched and deployed via the marketing site's manual deploy process; emergency changes require CEO approval and post-incident documentation.
Business continuity and disaster recovery
Recovery objectives are defined per criticality tier in our Business Continuity Plan:
- Critical-tier systems (client-facing platform, AI processing pipeline, customer intelligence hub, cloud infrastructure): RTO 4 hours, RPO 1 hour. Continuous replication and automated failover.
- High-tier systems (third-party integrations, email and business communications): RTO 8 hours, RPO 4 hours. Frequent automated snapshots with geographic redundancy.
- Medium-tier systems (CI/CD, internal tooling): RTO 24 hours, RPO 24 hours (or zero for source code via version control). Daily automated backups.
An annual continuity test verifies actual RTO/RPO against targets. If targets cannot be met, recovery strategies are revised and re-tested within 90 days.
DDoS protection
Distributed denial-of-service mitigation is provided at every edge in our stack: Vercel platform-level controls protect the marketing website, Cloudflare protects the Supabase API edge, and Railway provides platform-level controls for application traffic.