Where your data is stored

CensusIO runs on a managed cloud platform (Cloudflare). This page explains where your data lives by default and how we handle data residency when your organization, or the law you work under, requires data to stay in a particular place.

The default: US-first on a global edge

On the self-serve plans (Free, Watershed, and Professional), your data is stored on the cloud platform and served from its global edge, so the app is fast wherever your team is. This default is US-first, and it does not come with a single-country guarantee: we do not promise that every byte stays inside one country on these plans. Data is always encrypted in transit (HTTPS), and the credentials we store for your integrations are encrypted at rest.

Residency on request (Agency and Enterprise)

Agency and Enterprise customers get a dedicated database and file storage, separate from other organizations. Because it is dedicated, we can place it in the jurisdiction you need, in a cloud environment that complies with your data-protection rules:

• United States only, for US public-sector contracts that require data to stay in the US.
• European Union, for customers who need their data stored and processed in the EU under GDPR.
• Another region, where your country’s law requires it, provisioned to the nearest supported location.

You tell us the rule you work under, and we host you to it. We would rather meet your requirement than turn you away, so a residency rule is the start of a conversation, not a closed door.

Outside the US? Still welcome.

A US-first default does not mean US-only customers. If you are in Canada, the EU, or anywhere else and you have a data-residency or data-protection requirement, tell us and we will host your organization in a region and a manner that meets it.

What we can and cannot promise

We would rather be plain about this than imply more than we deliver.

• On the self-serve plans, residency is best-effort US-first, not a contractual single-country guarantee.
• On Agency and Enterprise, a dedicated database lets us place your data in a specific jurisdiction, and we document the controls in your onboarding.
• Some buyers need more than where data is stored, for example a contractual commitment that only specific personnel may access it, or an independent audit of those controls. We scope those per contract rather than claim them as standing features.

If your organization has a residency or data-protection requirement, contact us at support@censusio.com and we will walk through what you need.