Miro
work-management · miro.com · last checked 2026-09-19
Identity
| Legal entity | RealtimeBoard, Inc. dba Miro |
|---|---|
| HQ | US |
| Ultimate ownership | US |
| EU contracting entity | — |
| LEI | — |
| US CLOUD Act reach | direct |
| Source | trust.miro.com · 2026-09-18 |
Data location
| Region | EU data location | Minimum plan | Source | Observed |
|---|---|---|---|---|
| eu | EU by default | Included on all plans | help.miro.com | 2026-09-18 |
eu: CORRECTION of our 2026-09-18 reading of terms-not-stated. Page states 'EU Data Residency: Available for all plans' and marks the European Union as the DEFAULT region, with the primary data centre in Ireland and backup in Germany. US, AU and JP residency, by contrast, are Enterprise-only. Excludes beta and preview features; AI processing may occur outside the region where models are unavailable.
Subprocessor chain
5 transcribed · 5 with a country outside the EEA
| Subprocessor | Country | Purpose | Observed |
|---|---|---|---|
| Amazon Web Services, Inc. | US | Infrastructure. Data residency available for AUS, EU, US, Japan | 2026-09-18 |
| Anthropic | US | AI functionality | 2026-09-18 |
| Braze, Inc. | US | Service-related emails | 2026-09-18 |
| ElevenLabs | US | Live captions and transcripts | 2026-09-18 |
| Gainsight, Inc. | US | Customer success and support | 2026-09-18 |
The count outside the EEA is arithmetic over the country column, not a judgement about lawfulness. A transfer outside the EEA can be perfectly lawful; whether this one is depends on your use, not on the vendor.
Assurance
| Scheme | Status | Scope | Source | Observed |
|---|---|---|---|---|
| IRAP | claimed | IRAP attestation letter listed; requires access request. | trust.miro.com | 2026-09-18 |
| ISO27001 | certificate-published | ISO/IEC 27001 certificate downloadable without access. | trust.miro.com | 2026-09-18 |
| ISO42001 | certificate-published | ISO/IEC 42001:2023 certificate downloadable without access. | trust.miro.com | 2026-09-18 |
| SOC2T2 | claimed | SOC 2 Type II report 2025-2026 listed; requires access request. | trust.miro.com | 2026-09-18 |
| SOC3 | certificate-published | SOC 3 report 2025-2026 downloadable without access. | trust.miro.com | 2026-09-18 |
Claimed means the vendor asserts the certification on its own page and we have not seen the certificate. That is a distinction an auditor makes, so we make it too.
Support window
| Product | Support period | State | SBOM | Source | Observed |
|---|---|---|---|---|---|
| Miro (SaaS) | — | Service only | unknown | miro.com | 2026-09-18 |
Documents
| Document | Disclosure | Transcription | HTTP | Observed |
|---|---|---|---|---|
| trust-center | Gated | partial | 200 | 2026-09-18 |
History
| Detected | What moved | Why | Source |
|---|---|---|---|
| 2026-09-19 | EU data location available-terms-unstated → default Minimum plan set to Included on all plans Note rewritten | we read a better page | help.miro.com |