Data Residency, Subprocessors, and Cross‑Border Issues
What to ask
- Where is data stored and processed (regions)?
- Who are the subprocessors and what do they do?
- How is cross‑border transfer handled?
- Can we restrict processing to specific regions?
Practical tip
Ask for the subprocessor list in writing and require notice + opt-out for changes.