Your content stays stateside.
DXPR Builder lives inside your own Drupal site. Your content stays in your database. Our US servers run in Washington, DC, with AI pipelines on US-geolocked infrastructure.
Your content lives in your database.
Most page builders extract your content into their own cloud. DXPR Builder is a Drupal module: it runs inside your site, stores everything in your Drupal database, and renders pages from your own server. Personalization, A/B testing, and reinforcement learning all execute against your local data store. There is no DXPR content lake, no third-party CDN copy, no shadow replica.
Select a layer to see the product control behind it: where content rests, which third parties are in the path, and how AI processing stays under US jurisdiction.
Site content lives in structured Drupal content types with manageable fields. Your content stays in your database; personalization, A/B test variants and learning data never leave your Drupal site.

Every AI capability is routed through a provider you choose and can audit. On this site all chat capabilities route through DXPR, with no silent third party in the path.

Administrators pick the default model and restrict which models end users may select, backed by frontier US model providers alongside the EU privacy option. Run text, image and rewriting workloads on US-hosted endpoints under US jurisdiction.

Move at the pace of American business.
A product launch in New York. A recruiting campaign in Texas. Your teams need to publish while the web team keeps a consistent platform behind them.
Give marketers reusable layouts and visual editing inside Drupal. Your web team continues managing the roles, revisions and publishing process your organization already uses.

Washington, DC servers. US-geolocked services.
Servers in Washington, DC
DXPR’s US servers are hosted in Washington, DC. Hosting, CDN endpoints, backups, and monitoring stay within the United States.
US-geolocked AI pipelines
AI text generation, image generation, and content rewriting run on US-hosted model endpoints. Prompts and outputs stay within US jurisdiction.
Your database, your control
DXPR Builder stores all content, layouts, A/B test variants, and RL personalization data in your Drupal database. We never see it, copy it, or cache it.
Where your data lives in the United States.
DXPR’s US servers are hosted in Washington, DC. Your Drupal site stays with your chosen hosting provider. Review the location of each service with your security and procurement teams.
Support for your compliance review.
- Named US server locationWashington, DC, for DXPR’s US servers; US-geolocked AI, backups, and monitoring
- US-geolocked AIText and image generation run on US-hosted model endpoints exclusively
- ADA and Section 508 accessibilityIn DXPR Builder output and the DXPR Builder interface itself
- WCAG 2.2 AA conformanceWith documented accessibility statement and ongoing VPAT coverage
- Drupal security team coverageDXPR Builder and DXPR Theme are covered projects on drupal.org
- Responsible disclosure policyWith documented SLAs for vulnerability response
- No content extractionAll page content, A/B variants, personalization data, and analytics stay in your Drupal database
- Open-source foundationDXPR Builder is a Drupal module you can audit, extend, and fork
- CCPA complianceNo sale or sharing of personal information from DXPR-operated services
- Encryption in transitTLS 1.2+ and at rest for all DXPR-operated services
- HIPAA-compatible architectureBecause content stays in your Drupal database, DXPR Builder does not process or store protected health information; your BAA is with your hosting provider, not with us
- Executive Order 14028 alignmentOpen-source supply chain with Drupal security team oversight and published vulnerability disclosure process
- Compliance artefacts on requestData Processing Agreement, sub-processors list, security annex, and VPAT accessibility documentation
We built DXPR as a Drupal module, not a SaaS platform, because we believe your content should live where you control it. When your page builder runs inside your own CMS, data residency is not a vendor promise; it is the architecture.

Every community deserves a useful website.
A public meeting. A new service. A change in opening hours. The people who rely on your website need clear, current information.
Give local departments approved templates they can update themselves. Let subject experts prepare the content and reviewers check it before it reaches the public, within your Drupal publishing process.
Organizations that require domestic data operations.
Federal and state government
Public affairs, recruitment, and citizen-facing sites that must demonstrate domestic data residency and accessible content delivery.
Financial services
Investor portals, market education, and IR tooling at exchanges and institutions that need US-resident infrastructure and auditable data flows.
Healthcare and education
Academic medical centers, university web platforms, and research portals where HIPAA and state privacy laws require domestic data handling.
Legal, defense or medical infrastructure team with strict AI policies? Use your approved private model through an agent and keep visual editing in DXPR Builder.
Public oversight. Security campaigns. Pages that cannot wait.
From a Senate communications team to a security platform, see how American organizations give their teams a direct route to publishing with Drupal.
U.S. Senate Sergeant at Arms
Bring urgent public oversight online.
The Senate Sergeant at Arms (SAA) team used DXPR to launch the Congressional Oversight Commission website on a very short deadline. The same toolkit supports senator websites and the Senate Radio–TV Gallery.
HackerOne
Give security campaigns room to move.
HackerOne connects organizations with a worldwide community of security researchers. Its Drupal marketing team uses DXPR for visual page building behind product campaigns and security content.
Compare how page builders handle your data.
SaaS page builders extract your content into vendor-controlled infrastructure. DXPR Builder runs inside your Drupal site. The architecture itself is the compliance guarantee.
| Capability | DXPR Builder | Typical SaaS page builder |
|---|---|---|
| Content stored in your database | ✓ Always | ✕ Vendor cloud |
| US-only infrastructure | ✓ Geolocked | Mixed; may route through non-US regions |
| AI pipelines | ✓ US-hosted endpoints | Varies; routing often undisclosed |
| Vendor lock-in | ✓ None; open-source Drupal module | ✕ Proprietary; content tied to platform |
| Data residency guarantee | ✓ By architecture | By contract only |
| Source code audit | ✓ Open source | ✕ Closed source |
| ADA / Section 508 | ✓ WCAG 2.2 AA with VPAT | Varies; often self-reported |
Your content, your infrastructure, your jurisdiction.
Talk to us about our Washington, DC infrastructure and your US data residency requirements, or try DXPR Builder in the live demo.