Data residency
Last reviewed 2026-05-07
Default region
Personal Data for HiringCoachAI is stored in the United States. Specifically:
- Firestore: US (North America) multi-region, verified by Google Cloud console review on 2026-05-07.
- Firestore managed backups: US (North America) multi-region, daily with 98-day retention.
- Cloud Storage backup/export buckets: US multi-region; the primary backup/export bucket has a 90-day retention policy.
- Vercel: global edge network; origin execution US-preferred.
- Stripe: US + EU (per Stripe's architecture).
- AI providers: US.
- SendGrid: US.
- Sentry: US multi-region.
- Analytics (Amplitude, Mixpanel, Hotjar, GA, Meta): US and EU per vendor configuration.
Cross-border transfers
Personal Data of users outside the US is transferred to US infrastructure under:
- 2021 EU Standard Contractual Clauses (Decision 2021/914), Module 2 (controller → processor).
- UK International Data Transfer Addendum (UK IDTA) for UK data subjects.
- Adequacy decisions where applicable (e.g., EU-US Data Privacy Framework).
Sub-processor transfers are bound by each vendor's DPA, tracked in our internal DPA register (available on request via [email protected]), which incorporates SCCs.
Regional residency
The standard production deployment stores data in the United States. Institution-specific regional residency requirements, including EU residency, can be separately scoped for enterprise deployments using cloud-provider regional controls. A regional deployment commitment requires customer-agreement terms, infrastructure configuration, AI-provider transfer review, and a Transfer Impact Assessment before implementation.
Customer notification
Residency is documented in:
- This file (public)
- The privacy policy
- The DPA template (published; contact
[email protected]for execution)
Changes in residency (e.g., moving to a different region) are communicated 30 days in advance per change management.
Transfer Impact Assessment (TIA)
A TIA is conducted for any new sub-processor or transfer mechanism in a non-adequate jurisdiction. The template is maintained internally and is initialized on first use.
Change log
| Date | Change |
|---|---|
| 2026-04-24 | Initial documentation |
| 2026-05-07 | Updated Firestore and backup bucket residency from live GCP CLI evidence. |
| 2026-05-07 | Clarified that EU residency is not currently offered in production. |