Does your AI vendor promise where your data stays?

“(b) the applicable Service is provided from the United States and that for Box Zones, while the Content will be stored and may be partially processed in the Location(s), some processing and metadata storage and processing may continue to be provided from the United States;”

www.box.com/legal/termsofservice · read Oct 28, 2026

“A separate instance of DataRobot Managed AI Cloud is hosted in the AWS EU (Ireland) region to support the unique data protection requirements of EU customers.”

datarobot.com/legal/dpa · read Sep 11, 2026

“Azure• Cloud infrastructure, data storage & LLM Services India With respect to LLM Services, to the extent India Data Residency is selected by the customer per the terms of such customer's agreement, LLMs may be provided through Azure.”

compliance.elevenlabs.io/subprocessors · read Oct 22, 2026

“For non-Enterprise plan customers, customer data may be processed in the US, EU, or Singapore for latency and service performance purposes.”

compliance.elevenlabs.io/subprocessors · read Oct 22, 2026

“If the selected Region or Multi-Region is located in the European Union, Google will process Customer Data in use by the configured Service only within the European Union (but not necessarily in the same country).”

cloud.google.com/terms/service-terms · read Oct 20, 2026

“Personal data is primarily processed in the U.S., but customers can select data residency options where available.”

h2o.ai/privacy · read Oct 17, 2026

“As of July 19, 2021, new HubSpot customers have the option to store their data in our EU data center located in Frankfurt, Germany.”

hubspot.com/security · read Oct 10, 2026

“LOCATION OF PROCESSING AND DATA TRANSFERS The Company and its servers are located in the United States.”

huggingface.co/privacy · read Oct 28, 2026

“Security policy development, maintenance, and issuance is the responsibility of the Insider One Security Team. Insider One Infrastructure Insider One hosts the Insider One Services with Amazon Web Services, Customer Data is hosted by default in the AWS EU-West-1 region (Ireland).”

useinsider.com/legal/dpa · read Oct 12, 2026

“However, for those customers who use Intercom’s regional data hosting services in the EU or Australia, their data will be stored and processed in the applicable designated region (i.e., EU or Australia), unless otherwise noted in our Subprocessor Page.”

intercom.com/data-processing-agreement · read Oct 30, 2026

“Transfers of Your Personal Data 6.1The Intercom Services and Sites, and our messenger domains are provided and hosted in the United States.”

intercom.com/privacy · read Nov 1, 2026

“Observability Data, Telemetry Data, and related logs are stored and processed in the United States or Europe, as determined by the data region selected for Customer's project, and not by the Pinned Region;”

livekit.io/legal/data-processing-addendum · read Nov 2, 2026

“WHERE IS YOUR PERSONAL DATA STORED? Your personal data is securely stored by Luminance on the Luminance servers located in Cambridge, United Kingdom.”

luminance.com/privacy · read Sep 13, 2026

“The physical hardware powering n8n, and the data stored by the platform, is currently hosted in the European Union.”

n8n.io/security · read Oct 23, 2026

“Data Regions.** New Relic’s data hosting regions are described in the Documentation, currently located in the U.S. and the EU.”

newrelic.com/termsandconditions/dataprotection · read Oct 9, 2026

“Fast mode supports EU data residency for GPT-6.1 Sol, GPT-6.1 Terra, and GPT-6 Luna.”

developers.openai.com/api/docs/guides/your-data · read Oct 27, 2026

“Where is SeekOut data hosted? SeekOut's infrastructure is hosted on enterprise-grade cloud platforms with SOC 2 certified data centers in the United States.”

seekout.com/security · read Oct 10, 2026

“Customer Content submitted to AI features within Smartsheet Regions is processed within the applicable region (e.g., for Smartsheet Regions Australia, AI processing occurs within Australia).”

smartsheet.com/legal/subprocessors · read Oct 27, 2026

“Where is customer data stored and processed? Spellbook uses cloud providers with data centers in Canada and US for storing and processing customer data.”

spellbook.legal/security · read Oct 17, 2026

“V7 Darwin stores any of your data which reaches us in AWS S3 servers located in Ireland (EU).”

v7labs.com/terms · read Oct 25, 2026

“In particular, we may transfer your personal information to the United States and other countries where our affiliates, business partners, and service providers are located.”

abnormalsecurity.com/privacy · read Oct 23, 2026

“International Data Transfers Ada’s Platform is hosted on Amazon Web Services (AWS) in regions including the United States, Canada, Ireland, and Germany.”

ada.cx/legal/privacy-policy · read Oct 11, 2026

“Depending on the scope of your interactions with AWS Offerings, your personal information may be stored in or accessed from multiple countries, including the United States.”

aws.amazon.com/privacy · read Nov 2, 2026

“Any information we hold about you will be transferred to, used, processed, and stored in the United States and other countries and territories, which may not have data privacy or data protection laws equivalent to those in your country or territory.”

anthropic.com/privacy · read Oct 27, 2026

“(ii) where the UK GDPR applies, a transfer of personal data from the UK to any other country which is not based on adequacy regulations pursuant to section 17A of the Data Protection Act 2018; and (iii) where the Swiss DPA applies, a transfer of personal data to a country outside of Switzerland which is not included on the list of adequate jurisdictions published by the Swiss Federal Data Protect…”

anyscale.com/dpa · read Oct 3, 2026

“INTERNATIONAL TRANSFERS OF PERSONAL INFORMATION All personal information processed by us may be transferred, processed, and stored anywhere in the world, including, but not limited to, the United States or other countries, which may have data protection laws that are different from the laws where you live.”

anyscale.com/privacy · read Oct 4, 2026

“Our affiliates’ use of your personal information will be in accordance with the terms of this Privacy Policy. International Transfers. Arthur is a U.S. company and the information we collect will be transferred to, stored and processed in the U.S., as well as other international locations where we have affiliates and service providers. **The U.S. and other jurisdictions to where we transfer…”

arthur.ai/privacy · read Aug 31, 2026

“Territories and Transfers Personal information collected by Automation Anywhere may be stored and processed in your geographic region, in the United States, or in other countries in which Automation Anywhere or its service providers maintain facilities or operations.”

automationanywhere.com/privacy · read Oct 8, 2026

“Where do we process your personal data? Your Personal Data may be collected, transferred to and stored by us in the United Kingdom ("UK"), European Economic Area ("EEA"), and the United States of America ("USA") or Australia.”

beamery.com/privacy · read Oct 28, 2026

“(a) The parties agree that Company may transfer Personal Data processed under this DPA outside the EEA, the UK, or Switzerland as necessary to provide the Services.”

braintrust.dev/legal/dpa · read Oct 8, 2026

“INTERNATIONAL TRANSFERS, SECURITY AND DATA RETENTION 3.1 Processing of Personal Data in the U.S. and Elsewhere Braze, Inc. is located in the United States ("U.S.") and our group companies operate in Brazil, Canada, France, Germany, Ireland, Romania, Spain, the United Kingdom (“UK”**), Australia, Indonesia, Japan, Singapore, South Korea, and the United Arab Emirates.”

braze.com/privacy · read Oct 13, 2026

“This may include the transfer of Personal Data to the United States and/or other countries, in particular as Camunda, for the purposes of delivering the Exams, uses the Exam Platform, which is hosted by a third party provider (pValue, Inc. doing business as Certiverse, a Delaware corporation with its principal place of business in Chicago, Illinois).”

camunda.com/terms · read Oct 10, 2026

“The parties agree that Salesloft and its Sub-Processors may make international transfers of Personal Data Processed under this DPA, including outside the EEA, the UK, or Switzerland as necessary to provide the Services, and in accordance with Data Protection Laws.”

clari.com/dpa · read Sep 9, 2026

“If you do not want your personal information transferred to or processed or maintained in the United States, you should not use our Websites or should not engage in Interactions with us.”

clari.com/privacy · read Sep 20, 2026

“Your information collected through the Sites and our Products may be stored and processed in any country in which Confluent or its subsidiaries, affiliates, or service providers maintain facilities including your region, the United States, United Kingdom, European Economic Area, Canada, Singapore, India, Hong Kong, Israel, Japan, Malaysia, Singapore, South Korea, United Arab Emirates, Australia, …”

confluent.io/privacy · read Oct 27, 2026

“All information processed by us may be transferred, processed, and stored anywhere in the world, including, but not limited to, the United States or other countries, which may have data protection laws that are different from the laws where you live.”

copy.ai/privacy-policy · read Sep 7, 2026

“When you give us personal data, that data may be used, processed or stored anywhere in the world, including countries outside the European Economic Area (“EEA”).”

darktrace.com/legal/privacy-policy · read Oct 30, 2026

“As a result, your personal data may be transferred to, and processed in, any country where we operate or where our service providers operate, including the United States.”

datadoghq.com/privacy · read Oct 11, 2026

“We may transfer or disclose Personal Information to our subsidiaries, affiliated companies, Partners or other trusted third-party service providers or contractors, located in different Data Regions across the world (i.e., Israel, Japan, and the United States) for the purpose(s) described in this Policy.”

deepinstinct.com/privacy · read Oct 10, 2026

“International Transfer of Information Collected** Services that are hosted in the United States are intended for Visitors located within the United States.”

domino.ai/privacy-policy · read Oct 20, 2026

“Data that Freshworks processes for Customer as a Processor may be stored in the EU or outside of the EU, depending on the Freshworks product.”

www.freshworks.com/data-processing-addendum/ · read Oct 13, 2026

“To the extent Personal Data from the EEA, Switzerland or the UK is transferred to and processed by Gong in the USA on the basis of Gong’s certification to the DPF, and the Parties can no longer rely on the DPF, Section ‎6.3 of this DPA shall apply. **6.3.”

gong.io/legal/data-processing-addendum · read Oct 17, 2026

“Information may be processed and stored in the United States or other countries.”

thehive.ai/privacy · read Sep 24, 2026

“DATA TRANSFERS You acknowledge and agree that we may access and Process Customer Personal Data on a global basis as necessary to provide the Subscription Service in accordance with the Agreement, and in particular that Customer Personal Data may be transferred to and Processed by HubSpot, Inc. in the United States and to other jurisdictions where HubSpot Affiliates and Sub-Processors have operati…”

legal.hubspot.com/dpa · read Oct 10, 2026

“(ii) where the UK GDPR applies, a transfer of personal data from the UK to any other country which is not based on adequacy regulations pursuant to Section 17A of the Data Protection Act 2018; and (iii) where the Swiss DPA applies, a transfer of personal data to a country outside of Switzerland which is not included on the list of adequate jurisdictions published by the Swiss Federal Data Protect…”

intercom.com/data-processing-agreement · read Oct 16, 2026

“Specifically, we may transfer the personal information you provide to the United States and other countries where our affiliates, business partners, and service providers are located.”

docs.labelbox.com/page/privacy-notice · read Oct 30, 2026

“To the extent Customer's use of the Services requires an onward transfer mechanism to lawfully transfer Personal Data from a jurisdiction (i.e., the European Economic Area*,* the United Kingdom, Switzerland, or any other jurisdiction listed in Schedule 4 (Jurisdiction Specific Terms) of this Addendum) to LiveKit located outside of that jurisdiction ("Transfer Mechanism"), the terms set forth in…”

livekit.io/legal/data-processing-addendum · read Nov 2, 2026

“Data Transfers** You acknowledge and agree that we may access and Process Personal Data on a global basis as necessary to provide the Service in accordance with the Agreement, and in particular that Personal Data may be transferred to and Processed by Lucidworks in the United States and to other jurisdictions where Lucidworks Affiliates and Subprocessors have operations.”

lucidworks.com/legal/dpa · read Oct 1, 2026

“When you give us personal data, that data may be used, processed or stored anywhere in the world, including countries outside the European Economic Area (“EEA”).”

luminance.com/privacy · read Sep 13, 2026

“For Previews that allow Personal Data processing, all terms in this DPA apply subject to following: Preview Data may be transferred to, and stored and processed in, the United States or any other country in which Microsoft or its Subprocessors operate.”

www.microsoft.com/licensing/docs/documents/download/MicrosoftProductandServicesDPA(WW)(English)(May2026)(CR).docx · read Oct 1, 2026

“Where We Store Your Information** As an organization with global operations, the information that we collect from you may be transferred to, and stored at, a destination located in a jurisdiction other than the one in which the information was collected (information is frequently transferred to the United States because that is where our primary operations are located).”

moogsoft.com/privacy · read Aug 31, 2026

“Module Four (processor to controller) of the SCC shall apply where Nebius, acting as a Processor established in the EEA, transfers Personal Data to the Customer acting as a Controller located outside the EEA.”

docs.nebius.com/legal/dpa · read Oct 27, 2026

“International data transfers All information processed by us may be transferred, processed, and stored anywhere in the world, including but not limited to, the United States or other countries, which may have data protection laws that are different from the laws where you live.”

www.notion.com/trust/privacy-policy · read Oct 13, 2026

“OpenAI processes your Personal Data for the purposes described in this policy on servers located in various jurisdictions, including processing and storing your Personal Data in our facilities and servers in the United States, or in countries or territories where our affiliates and partners or our vendors and service providers are located.”

openai.com/privacy · read Oct 27, 2026

“The personal information we collect may be transferred to and stored in countries outside of the jurisdiction you are in to locations where we and our third-party service providers have operations, including in the United States of America.”

paloaltonetworks.com/privacy · read Oct 30, 2026

“How we store and protect your information Storage and Processing: Your information collected through the Services may be stored and processed in the United States or any other country in which DigitalOcean or its subsidiaries, affiliates or service providers maintain facilities.”

paperspace.com/privacy-policy · read Sep 7, 2026

“Any information that we collect (including your personal information) is stored and processed in various jurisdictions around the world (including in the United States), for the purposes detailed in this Privacy Policy.”

pinecone.io/privacy · read Oct 13, 2026

“International transfers The personal data we collect may be transferred to and stored in countries outside of the jurisdiction you are in where we and our third-party service providers have operations, including in the United States.”

poly.ai/privacy-policy · read Oct 23, 2026

“Transfers of Personal Data 9.1 The parties agree that Company may transfer Personal Data processed under this DPA outside the EEA, the UK, or Switzerland as necessary to provide the Services.”

poolside.ai/legal/dpa · read Oct 10, 2026

“In some cases, data may be transferred to and processed in countries outside the EU or the European Economic Area for this purpose ("Third Countries").”

qdrant.tech/legal/privacy-policy · read Oct 30, 2026

“Where one or both Parties are located in Non-Adequate Countries and are Processing Personal Data subject to the UK GDPR, the EU SCC apply and the UK International Data Transfer Addendum to the EU SCC, entered into force on 21 March 2022 (as amended or supplemented) (“UK Addendum”), is incorporated by reference and is entered into by executing this DPA. b.”

redis.io/legal/data-processing-addendum-dpa/ · read Oct 28, 2026

“Cross-Border Data Transfers Our Services are primarily hosted in the United States and may also be hosted in locations outside of the jurisdiction in which you live.”

replit.com/privacy · read Oct 27, 2026

“Content that you submit for AI-assisted prompt generation is processed to fulfill your request and is not retained by the connector beyond that purpose. ‍ INTERNATIONAL TRANSFER OF DATA Retell AI is based in the United States, and the personal information we collect is primarily stored and processed in the United States.”

www.retellai.com/legal/privacy-policy · read Oct 31, 2026

“You acknowledge and agree that any personal data provided to us may be stored in or accessed from multiple countries, including the United States.”

rev.com/legal/privacy · read Oct 30, 2026

“International transfers of Personal Data Your Personal Data may be transferred to and stored by us in the United States and by our affiliates and third-parties listed in Section 6 above.”

salesforce.com/privacy · read Oct 27, 2026

“The parties agree that Salesloft and its Sub-Processors may make international transfers of Personal Data Processed under this DPA, including outside the EEA, the UK, or Switzerland as necessary to provide the Services, and in accordance with Data Protection Laws.”

salesloft.com/legal/data-processing-addendum · read Oct 23, 2026

“If you do not want your personal information transferred to or processed or maintained in the United States, you should not use our Websites or should not engage in Interactions with us.”

salesloft.com/privacy-policy · read Sep 20, 2026

“Therefore, your personal data may be transferred and processed outside your jurisdiction and in countries that may not provide for the same level of data protection as your jurisdiction, such as the European Economic Area (“EEA”).”

sas.com/privacy · read Aug 31, 2026

“Personal information collected on our site may be transferred across state and country borders and stored or processed in the United States or any other country in which SAS or its subsidiaries, affiliates, or business units maintain facilities for the purposes of data consolidation, storage, and simplified customer information management.”

sas.com/privacy · read Aug 31, 2026

“International Transfer Information that we collect from you may be transferred to, stored, and processed by us, our affiliates, and other third parties in countries outside the EEA, the UK, and Switzerland including, but not limited to, the United States and other countries, where data protection and privacy regulations may not offer the same level of protection as in other parts of the world.”

scale.ai/legal/privacy · read Oct 17, 2026

“Personal data we collect will be transferred to, used, and stored in the United States or other jurisdictions in which Smartsheet, our affiliates, or service providers are located; these locations (including the United States) may not guarantee the same level of protection of personal data as the one in which you live.”

smartsheet.com/privacy · read Nov 1, 2026

“Where we store your data As some of our hosting is provided by third party cloud providers, the data that we collect from you may be stored and processed in a location outside of the European Economic Area, United Kingdom or Switzerland.”

speechmatics.com/privacy-policy · read Oct 23, 2026

“International Data Transfers# When you access our website or use our Services, your personal data may be transferred to and processed in countries outside your jurisdiction, including the United States.”

ultralytics.com/privacy · read Oct 31, 2026

“Information that we collect from the Sites will be transferred to, and processed in, the United States and in any other country where Zapier or its affiliates, subsidiaries, or third-party service providers maintain facilities or personnel.”

zapier.com/privacy · read Oct 30, 2026