Data residency

Where data is physically stored and processed, as chosen by a customer or promised by a vendor, such as EU-only hosting.

Data residency is a commitment about location, usually made in a contract or a product setting, for legal, customer or policy reasons. It differs from data sovereignty, which is about whose laws apply, and from data localization, which is a legal requirement to keep data in a country.

A vendor’s residency promise covers its own hosting. Its subprocessor list shows where the rest of the processing happens, which is why a new location on that list is worth noticing.

ClauseTrail watches vendors' subprocessor lists, DPAs, privacy policies, terms and AI terms, and tells your team what changed and by when to object.