Trust Center

Data residency

At launch, QEHS tenant data is hosted in the United States, compute on Hostinger VPS and object storage on AWS S3 (us-east-1). Additional regions are available on customer demand; no specific timelines are committed in advance. Contact us to discuss your residency requirements.

United States

Active

US-East

Compute: Hostinger VPS (United States)
Object storage: AWS S3 us-east-1 (N. Virginia)
Regulatory fit: CCPA, SOX. HIPAA controls not currently in scope, contact us.

European Union

Planned, on customer demand

Compute: Available on customer demand
Object storage: Available on customer demand
Regulatory fit: GDPR, SCCs (EU 2021/914), Schrems II supplementary measures documented.

United Kingdom

Planned, on customer demand

Compute: Available on customer demand
Object storage: Available on customer demand
Regulatory fit: UK GDPR, IDTA.

Australia

Planned, on customer demand

Compute: Available on customer demand
Object storage: Available on customer demand
Regulatory fit: Australian Privacy Principles.

Canada

Planned, on customer demand

Compute: Available on customer demand
Object storage: Available on customer demand
Regulatory fit: PIPEDA, Québec Law 25.

United Arab Emirates

Planned, on customer demand

UAE

Compute: Available on customer demand
Object storage: Available on customer demand
Regulatory fit: UAE PDPL, ADGM, DIFC DP Law.

What stays in-region

• Customer content, records, attachments, audit trails, search indices.
• Database backups and WAL archives.
• Object-storage buckets and CDN origin.
• Worker queues and scheduled-job state.

What may cross regions

• Authenticated support access, documented, time-boxed, logged.
• Aggregate, de-identified telemetry used for product health (opt-out on Enterprise).
• Billing metadata (Stripe, US). Separate sub-processor relationship.

Full detail is in the Data Processing Addendum and the Trust Center. Sub-processors listed at /trust/subprocessors.