Jurisdictional exposure
Sub-services (4)
Persistent sandboxes
Sandboxes that auto-save state on stop and resume where they left off
Snapshots
Save a running sandbox's state to skip setup on later runs
Drives
Persistent filesystem storage reusable across sandbox runs
Managed and custom images
Vercel Managed Images or own OCI images from Vercel Container Registry
Compliance & Certifications
This service is attested for the following frameworks. Always verify with the provider before relying on a specific compliance posture.
Where this runs
Commercial regions (19)
Europe (5)
- Paris, France
- Frankfurt, Germany
- Dublin, Ireland
- Stockholm, Sweden
- London, UK
North America (5)
- Montréal, Canada
- Cleveland, USA
- Portland, USA
- San Francisco, USA
- Washington, D.C., USA
South America (1)
- São Paulo, Brazil
Asia (6)
- Hong Kong
- Mumbai, India
- Osaka, Japan
- Tokyo, Japan
- Singapore
- Seoul, South Korea
Oceania (1)
- Sydney, Australia
Africa (1)
- Cape Town, South Africa
Tags
Equivalent services on other platforms
Isolated environments for executing untrusted or AI-generated code in Linux containers or isolated Workers, controlled through the Sandbox SDK's TypeScript API for commands, files and exposed services. GA on the Workers Paid plan since April 2026.
Kubernetes-native sandbox for running untrusted AI-agent code on GKE, using gVisor kernel isolation, with pod snapshots for pause and resume and high-rate sandbox creation. Built on the open-source Kubernetes Agent Sandbox project.