Your data stays where we say it is.
on8 stores and processes customer data in the United Kingdom; requests pass through Cloudflare's global edge (TLS termination and WAF) before reaching that UK infrastructure. Enterprise customers can discuss a dedicated deployment in another region; any cross-border transfer is governed by our Data Processing Agreement, which sets out the safeguards we apply.
Regions
Available hosting regions
| Region | Location | Available on |
|---|---|---|
| United Kingdom | IONOS data centre, UK | All plans (default) |
| Dedicated region | Agreed per contract | Enterprise, on request |
Exact data center locations may change as we expand. Customers are notified of any change affecting their selected region.
Sovereignty
How data residency works
Stored and processed in the UK
Customer data, including uploaded documents and screening records, is stored and processed in the United Kingdom, and we do not silently relocate it. Requests reach us through Cloudflare's global edge, which terminates TLS and screens traffic (WAF) at the location nearest the visitor; that transit is covered by our Data Processing Agreement and listed on the subprocessors page.
Cross-border transfers
Where a transfer outside your region is necessary, it is governed by our Data Processing Agreement, which sets out the safeguards we apply. Ask us and we will tell you which one covers a particular transfer.
Where processing happens
Screening, matching and reporting run on the same UK infrastructure the data lives on. Every third party that may touch data is on our subprocessors page.
Customer choice
Enterprise customers who need another region can discuss a dedicated deployment. The choice is recorded in the contract and applies to new data going forward.
Transfers
Cross-border transfers are documented in our Data Processing Agreement, which sets out the safeguards we apply. For the safeguard covering a particular transfer, a counter-signed copy, or to discuss a region for your deployment, email dpo@on8.ai.