Skip to main content
Data Residency

Understand Where Your Records Are Stored

Choose an EU or US region for supported application records. Regional storage is one part of a privacy programme; legal duties depend on your data flows and circumstances.

Region Selection

Choose your data region during account creation. Supported application records are routed to that region; review external service and transfer flows separately.

Immutable Region

Once set, your data region cannot be changed in self-service. Contact support if you need a migration assessment.

Transfer Review

Region selection does not itself establish legal compliance. Review processors, transfers, retention and applicable safeguards for your organisation.

Available Data Regions

Select the region that best matches your regulatory requirements and user base location.

🇪🇺

European Union

Frankfurt, Germany

Selected application records are routed to EU storage. International transfers and other processing require a separate assessment.

Requirements to review
GDPRePrivacy Directive
Features
  • EU regional storage for supported records
  • Document data flows and recipients
  • Review transfer safeguards where needed
  • Manage data-subject requests
🇺🇸

United States

Iowa, USA

Selected application records are routed to US storage. Applicable privacy duties and transfers still need review.

Requirements to review
CCPACPRAState Privacy Laws
Features
  • US regional storage for supported records
  • Document data flows and recipients
  • Review applicable state privacy requirements
  • Manage data-subject requests

Operating outside the EU or US? Talk to us about your requirements. Talk to sales.

What Data Goes Where

An overview of application storage. Review your actual integrations and external service flows separately.

User Consent Records
Cookie consents, marketing preferences, and opt-out records
Cloudflare consent KV — regional residency unverified
Compliance Evidence
ISO 27001 evidence, audit trails, and certification documents
Depends on the evidence storage service
Audit Logs
User activity logs, access records, and security events
Depends on the logging destination
Client Data
Client profiles, contact information, and DPO details
Regional website database for supported records
Framework Definitions
Compliance frameworks, control libraries, and regulation definitions
Shared platform definitions
Platform Configuration
System settings, feature flags, and platform metadata
Depends on the service

Why Can't I Change My Data Region?

Data region is locked after account creation for several important reasons:

  • Transfer review: Moving records between regions may require a documented transfer assessment and safeguards.
  • Audit trail consistency: A migration needs a plan to preserve historical records and their provenance.
  • Data Integrity: Migrating data between regions risks data loss or corruption, which could impact your compliance posture.
  • Operational clarity: A fixed region makes the storage location of supported application records easier to document.

Need to change your region? In exceptional cases, we can assist with data migration. This requires a formal request, legal review, and may involve service interruption. Contact our support team for assistance.

Privacy Programme Topics

Region selection should be considered alongside your access controls, suppliers and legal assessment.

Storage location
Document where records are held
Access controls
Review who can use the data
Transfers
Assess recipients and safeguards
Retention
Set and review retention rules

Ready to Get Started?

Create your account and select your data region. The default region is EU.

Create AccountContact Sales

Regional storage alone does not determine compliance with any privacy law. Contact sales to discuss your data-flow requirements.