We currently use multiple Availability Zones in Amazon AWS East (N.Virginia) for data application and storage services.

You can find full Data Processing Policy in the Nosto admin under Settings > Account Settings > Legal

As a summary, we store and process the information we have collected on computers/servers located in the USA or EU/EEA or in such countries which the Commission of European Union has determined to ensure adequate protection of personal data.

We will not move personal data from these countries without notifying you, unless required to comply with the law or requests of governmental entities. In any transfers of personal data to our third party service providers located in the USA we transfer personal data to them based on the Data Processing Agreements which incorporate the Standard Contractual Clauses 2010/87/EU.

We have implemented technical and organisational precautions to protect the security and integrity of personal data processed by us.

Our datacenter is located in us-east-1 region. We use CloudFront as CDN which means that visitors interacting with us will connect to the edge location nearest to them. This decreases the latency as in some cases we’re able to serve the content directly from the edge server and it also decreases the time spent on SSL negotiation as round-trip times to edge locations are shorter.

So in practise a visitor in Sweden would automatically connect to an edge location in Stockholm that would handle the request. Depending on the request we’d either serve it directly from Stockholm edge or forward the request to our US datacenter using AWS optimised network paths.
​
​