Data Residency for Trust Management Hub – October 30, 2024

Introducing Data Residency. With Data Residency, you may specify your operational region for storing, processing, and managing data.

Frequently Asked Questions

• What is Data Residency?
• Why should I care about Data Residency?
• Which regions are available for Data Residency?
• What data are in-scope for Data Residency?
• Can data be shared across multiple regions?
• What happens if I receive an invite to connect from a different region?
• Is there an additional cost for selecting a specific data residency?
• Can I change my data residency after it has been set?

What is Data Residency?

The Data Residency feature allows you to select between the United States and Europe (or both) as your operational region for data storage and processing. This allows your data to be managed according to your internal vendor risk management guidelines.

Why should I care about Data Residency?

Specifying where your data is stored and processed can help your business meet legal requirements, mitigate compliance concerns, and avoid potential data sovereignty issues.

Which regions are available for Data Residency?

You can select between the United States or Europe as your operational region. If you choose Europe, data will be hosted in Ireland.

What data are in-scope for Data Residency?

Data Residency applies to specific data stored and processed by the Trust Management Hub (“TMH”) application, including:

• Customer connections
• Questionnaire answers
• Uploaded documentation
• Internal notes
• Customer contacts

Can data be shared across multiple regions?

No. The US and EU regions operate as independent networks, meaning data is not shared across them. If a vendor or customer is invited to connect from a different region, the region from where the request originates will be enabled for them to respond to the request.

What happens if I receive an invite to connect from a different region?

When you receive an invite (connection or share request) from a different data residency, the new region becomes available, allowing you to accept and interact with the connection. You will receive an alert notifying you of the new available residency, and you can switch between regions as needed.

Is there an additional cost for selecting a specific data residency?

Currently, there are no additional costs associated with selecting a specific data residency region. The choice is entirely based on your business needs and compliance requirements.

Can I change my data residency after it has been set?

Yes. You can update your default region on the User Preferences tab of the Account page [ Settings ➔ Account ➔ User Preferences]. Please note, your existing data will not be automatically transferred to the new region.