Data residency statement

Effective Date: May 15, 2026

Where your data lives

CapchaCloud operates on Cloudflare’s global edge network. Different data categories live in different layers:

Data categoryPrimary storageNotes
Account metadata (tenant configuration, settings, profile)Cloudflare D1, primary region: ENAM (Eastern North America)Replicated within Cloudflare’s North America infrastructure
Consent records and audit logsCloudflare D1 + R2 (ENAM region by default)Cryptographically hashed and sealed; WORM-style retention objectives
Encrypted payload vaultCloudflare R2 (default location: ENAM)AES-256 at rest; signed URLs for retrieval
Edge cache and transient stateCloudflare’s global edge (330+ PoPs)TTL-limited; no long-term storage
Logs and telemetryCloudflare’s log infrastructureRetention as set out in the Data retention policy
Billing dataStripe, Inc. (US)CapchaCloud does not store cardholder data

Customer choice of region

Default storage is Cloudflare’s ENAM (Eastern North America) region. Customers requiring data residency in another region (for example WEUR for European customers requiring EEA-resident storage) may request alternate provisioning under an Enterprise contract. Contact support@serviceautomations.ai (subject: “Data residency / Enterprise”).

International transfers

For non-U.S. Customers and End Users whose Personal Data is Processed by CapchaCloud, see DPA §11 (International Transfers). Standard Contractual Clauses, UK IDTA, and Swiss adaptations are incorporated by reference into the DPA.

Government access

CapchaCloud is subject to U.S. law and may be compelled to disclose data in response to lawful U.S. legal process. We will, where lawful and reasonable: challenge overbroad or invalid demands; notify affected Customers of demands targeting their data where permitted; publish transparency information about government requests when we have material to report. Subprocessors are subject to their respective jurisdictions’ laws.

Contact

support@serviceautomations.ai — subject: “Data residency” or “Privacy”.

End of data residency statement. Last updated: May 15, 2026.