Data residency
Last reviewed 2026-07-29
Default region
Personal Data for HiringCoachAI is stored in the United States. Specifically:
Firestore: US (North America) multi-region, verified by Google Cloud console review on 2026-05-07.
Firestore managed backups: US (North America) multi-region, daily with 98-day retention.
Cloud Storage backup/export buckets: US multi-region; the primary backup/export bucket has a 90-day retention policy.
Vercel: global edge network; origin execution US-preferred.
Stripe: US + EU (per Stripe's architecture).
AI providers: US.
SendGrid: US.
Sentry: US multi-region.
Analytics (Amplitude, Mixpanel, PostHog, Vercel Analytics): US and EU per vendor configuration.
Meta Conversions API (server-side gift-flow events only): US per vendor configuration. Hotjar, GA/GTM/LinkedIn Insight browser tags, and the client Meta Pixel are disabled.
Cross-border transfers
Personal Data of users outside the US is transferred to US infrastructure under:
2021 EU Standard Contractual Clauses (Decision 2021/914), Module 2 (controller → processor).
UK International Data Transfer Addendum (UK IDTA) for UK data subjects.
Adequacy decisions where applicable (e.g., EU-US Data Privacy Framework).
Sub-processor transfers are bound by each vendor's DPA, tracked in our internal DPA register (available on request via [email protected]), which incorporates SCCs.
Regional residency
The standard production deployment stores data in the United States. Institution-specific regional residency requirements, including EU residency, can be separately scoped for enterprise deployments using cloud-provider regional controls. A regional deployment commitment requires customer-agreement terms, infrastructure configuration, AI-provider transfer review, and a Transfer Impact Assessment before implementation.
Customer notification
Residency is documented in:
This file (public)
The privacy policy
The DPA template (published; contact [email protected] for execution)
Changes in residency (e.g., moving to a different region) are communicated 30 days in advance per change management.
Transfer Impact Assessment (TIA)
A TIA is conducted for any new sub-processor or transfer mechanism in a non-adequate jurisdiction. The template is maintained internally and is initialized on first use.
Change log
Date Change
2026-04-24 Initial documentation
2026-05-07 Updated Firestore and backup bucket residency from live GCP CLI evidence.
2026-05-07 Clarified that EU residency is not currently offered in production.
2026-07-29 Updated the active analytics and server-side conversion vendor inventory after browser replay, tag-manager, and pixel integrations were disabled.