Data Residency

Use Data Residency to select either the United States or Europe❖ as your operational region for storing, processing, and managing your Vendor Risk Management (“VRM”) and Trust Management Hub (“TMH”) data. Update your region in Account preferences. If you have existing data from another region, the data is not automatically transferred to the new region.

❖ If you choose Europe, data is hosted in Ireland.

• Data inputted into VRM and TMH can be hosted within a selected region(s) according to a user's preference or internal requirements.
• The US and EU operate as independent networks; VRM/TMH data is kept separate within each region.
• When a vendor or customer from a different region is invited to connect, the region from where the request originates is enabled for them to respond to the request.

With Data Residency, you can:

• Specify where your data is stored and processed to meet your legal business requirements, mitigate compliance concerns, and avoid potential data sovereignty issues.
• Manage your data and compliance with regional or industry requirements.
  • Build Trust: Enhances trust by allowing users to select where their data is stored and processed.
  • Data Sovereignty Benefits: Enable flexibility in navigating geopolitical changes and adapt to evolving internet governance policies.

Applicable Data

Data Residency applies exclusively† to VRM and TMH data, which includes the following:

VRM Application

• Assessment settings
• Vendor connections and their settings
• Internal and vendor contacts
• Internal notes
• Questionnaires and internal documentation
• Findings
• Messages with vendors

Trust Management Hub Application

• Customer connections and their settings
• Questionnaire answers
• Uploaded documentation
• Internal notes
• Customer contacts
• Findings responses
• Messages with customers

† All other, out-of-scope data (including Bitsight users' information, Continuous Monitoring data, Security Performance Management data, etc.) are hosted in the US.

Workflow

1. Invite Received: When a user receives an invite from a new region (via email and in-app), the new Data Residency region becomes available.
2. New Residency Available: An alert is displayed, informing the user about the new available region.
3. Switching Between Residencies: Users can switch between the US and EU regions as needed to manage connections and interactions.