Data Residency: select the region for VRM and TMH data

Data Residency lets you select the United States or Europe as the operational region where Bitsight stores, processes, and manages your Vendor Risk Management (VRM) and Trust Management Hub (TMH) data. This article explains what Data Residency is, how to change your region, what happens when a vendor or customer in another region connects with you, and which data Data Residency covers.

What is Data Residency?

Data Residency is a feature that lets you select either the United States or Europe as the operational region for storing, processing, and managing your Vendor Risk Management (VRM) and Trust Management Hub (TMH) data. If you select Europe, Bitsight hosts the data in Ireland.

You can host the data you enter in VRM and TMH in the region you select, based on your preference or internal requirements. The US and Europe regions operate as independent networks, and Bitsight keeps VRM and TMH data separate within each region.

Why would I use Data Residency?

Use Data Residency to specify where Bitsight stores and processes your VRM and TMH data. This helps you meet legal business requirements, mitigate compliance concerns, and avoid potential data sovereignty issues. It also helps you manage your data in line with regional or industry requirements.

How do I change my Data Residency region?

To change the region where Bitsight stores your VRM and TMH data:

1. Open the Account page.
2. Select the User Preferences tab. For details about this tab, see Account User Preferences Tab.
3. In the Data Residency section, update your region.

If you have existing data in another region, Bitsight does not automatically transfer it to the new region.

What happens when a vendor or customer in a different region connects with me?

When you invite a vendor or customer from a different region to connect, Bitsight enables the region the request comes from so they can respond to it.

When you receive an invite from a new region, by email and in the app, that Data Residency region becomes available to you. The app displays an alert that tells you about the new region. You can switch between the US and Europe regions as needed to manage connections and interactions.

Which data does Data Residency cover?

Data Residency applies only to VRM and TMH data. The following sections list the data in each application.

What VRM data does Data Residency cover?

Data Residency covers the following Vendor Risk Management (VRM) data:

• Assessment settings
• Vendor connections and their settings
• Internal and vendor contacts
• Internal notes
• Questionnaires and internal documentation
• Findings
• Messages with vendors

What TMH data does Data Residency cover?

Data Residency covers the following Trust Management Hub (TMH) data:

• Customer connections and their settings
• Questionnaire answers
• Uploaded documentation
• Internal notes
• Customer contacts
• Findings responses
• Messages with customers

Which data does Data Residency not cover?

Data Residency does not cover all other data. Bitsight hosts that data in the US. This includes Bitsight users’ information, Continuous Monitoring data, and Security Posture Management data, among other out-of-scope data.