The detail
| What | Where |
|---|---|
| Your websites, databases and email (hosting) | UK data centres, on Krystal Cloud infrastructure |
| Backups | UK and EEA (Enhance backups are kept on off-server backup servers, including Hetzner in the EU, for 30 days) |
| VPS | The location you choose: London (UK), Amsterdam (Netherlands), New York or Phoenix (USA) |
| DNS servers for hosted domains | UK, Amsterdam and the USA, so your domains keep resolving if one location has a problem |
| Outgoing email filtering | MailChannels – Canada, with relay servers worldwide |
A few points worth knowing
- DNS records hold things like your domain name and the server addresses it points to. They’re publicly visible by design.
- If you choose a VPS outside the UK, that choice is your instruction to host it there, and you’re responsible for making sure it meets your own data protection obligations.
- Domain registration details go to the registry that runs your chosen extension, which may be outside the UK (for example, .com is run in the USA). This is necessary to register the domain you asked for.
How data outside the UK is protected
Where any data is processed outside the UK, one of these legal safeguards applies:
- the destination has UK “adequacy” regulations (this includes the EEA, and US organisations certified under the UK Extension to the EU-US Data Privacy Framework)
- a written agreement is in place: the ICO’s International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses