Your data and the EU

Your workspace is stored in the EU, in Germany and Finland. Where a service we use reaches outside the EU, this page says so.

Where it is stored

The database, files and backups are hosted in Germany, and document services run in Finland. Error monitoring and product analytics run in Germany, and account emails go out through a provider based in the Netherlands.

Sensitive fields and Data Room files are encrypted with a separate key for each workspace. See Encryption and workspace separation.

Mail, calendar and AI

Your mailbox (Google, Microsoft or IMAP) connects through our mail connection provider in Ireland. Its backups may be in the US, Canada, Australia and Brazil, covered by Standard Contractual Clauses.

AI requests go to EU data centres, and your data is not used to train AI models. See AI and your data.

What can leave the EU

• Card payments. Our payment provider's EU company is in Ireland, and its US parent also processes payment data. We never see your card number.
• Website delivery. The network in front of our website and app runs worldwide. Requests pass through it in transit and are not stored there.
• Web research. Off by default. When you turn it on, search queries go to a search provider in France that may fall back to a provider in the US, and pages it reads are fetched from their sites.
• Your own tools. HubSpot, Motion or any other tool you connect keeps your data where your account with them is, under your own contract with them.

Your controls

Export everything, delete older items sooner, or request deletion under Settings, Privacy & data. See Export, retention and deletion. Every service we use is named, with its location, in the sub-processor register.