Last updated: 19 July 2026
CrowAgent operates from the United Kingdom and processes personal data primarily in Europe. This page discloses the specific regions where each class of data is stored and processed, so you can make an informed procurement decision.
| Service | Purpose | Region |
|---|---|---|
| Supabase (Postgres + Auth + Storage) | Primary database, authentication, report PDFs | AWS eu-west-1 (Ireland) |
| Railway (FastAPI compute) | Backend API, EPC lookups, PDF generation | Compute only, no primary data store; region being confirmed |
| Vercel (Next.js) | Frontend hosting, server-side routes | Global edge; compute region being confirmed. No primary data store. |
| Cloudflare (DNS, DDoS, WAF) | Edge security and DNS resolution | Global edge; no persistent storage |
| Sub-processor | Purpose | Region | Transfer mechanism |
|---|---|---|---|
| Stripe Payments Europe, Ltd | Billing, VAT handling, card vaulting | EU (Dublin) with limited US fallback | SCCs + EU-US DPF |
| Brevo | Transactional and lifecycle email | Region being confirmed | SCCs + UK IDTA |
| Sentry GmbH | Error telemetry (scrubbed) | EU region | SCCs |
| PostHog | Product analytics (consented) | eu.posthog.com (Frankfurt) | SCCs |
| Google (Gemini API) | AI generation across CrowMark, CrowCyber, CrowCash and CrowESG | Not region-pinned by the API used | SCCs + UK IDTA |
| Anthropic | AI generation — Cyber Essentials suggestions, tender pre-reads, receivables scoring, assistant intent | United States | SCCs + UK IDTA |
| Upstash Redis | Rate limiting counters (no PII) | eu-west-1 (Ireland) | SCCs |
Where a sub-processor operates outside the UK/EEA, we rely on the UK International Data Transfer Agreement (IDTA) or EU Standard Contractual Clauses (SCCs) plus any additional safeguards required by the relevant supervisory authority. A full list of transfer mechanisms is maintained in our Data Processing Agreement.
All customer data today is stored in AWS eu-west-1 (Ireland), as set out in section 1. No customer data is stored in a UK region. We do not currently offer region-pinning, and no UK-resident storage option is available on any plan at present.
Customers with a regulatory requirement to store data exclusively in the UK rather than the EEA should contact hello@crowagent.ai before contracting. A UK storage region would be a future change requiring engineering work and a separate written agreement; it is not something we can enable on an existing account, and nothing on this page should be read as a commitment that it is available today.
Any change that would move your data into a different region will be disclosed here and emailed to account holders at least 30 days in advance.