Where is the data?

Where is the shared service hosted?

In the European Union. The shared service runs at a cloud provider in the Ireland region, with backups in a second European region (Frankfurt). The service does not copy organizations' data outside the EU.

What about sub-processors?

The cloud provider is a sub-processor, as is Android's notification service, which only receives an alert to wake the app (without the request's content). Emails are sent through an email sending service in the EU. Your provider supplies the definitive list and the data processing agreement.

What data goes through the phone?

The phone only receives an alert that a request exists. The request's content is fetched directly from the service, over an encrypted connection. The approval key never leaves the phone's secure chip.

And on a self-hosted installation?

On a self-hosted installation, the data stays wherever your organization installs the service. The Edge appliance, for privileged access, runs in your network and sends the central service only the audit log and the encrypted recordings.

Is the data encrypted?

Yes:

• in transit, with TLS 1.3;
• at rest, with database and backup encryption;
• sensitive secrets (code seeds, computer recovery keys, privileged credentials) are sealed with separately managed keys.

Where can I learn more?

See How is GDPR handled and ask your provider for the data processing agreement.