Vendor profile
Adobe Creative Cloud: where is customer data stored and processed?
Adobe Creative Cloud is a product used mainly by private individuals and is not a business product. Customer content is stored and run in several countries, including the USA, Ireland and Japan, and via Microsoft Azure in the UK, Canada, India and Australia among others. Customers can choose region for some products, and the provider also has regions outside the EEA that can be opted out of. Login runs through Okta in the USA, Ireland, Singapore and the UK. Support is provided from Armenia, Australia, India, the USA, South Korea and Japan, while Teleperformance in China is not confirmed. SMS notifications are sent from the USA, UK and Serbia, and monitoring via New Relic (USA) and Splunk (UK).
See the map and sourcesWhere data is stored and processed
| Activity | In the EU/EEA | Outside the EU/EEA |
|---|---|---|
| Storage | Ireland, Europe (country not stated) | USA, United Kingdom, Canada, India, Australia, Singapore, Japan |
| Processing | Ireland, Europe (country not stated) | USA, United Kingdom, Canada, India, Australia, Singapore, Japan |
| Login and user account | Ireland, Europe (country not stated) | USA, Singapore, United Kingdom |
| Logs and telemetry | Europe (country not stated) | USA, United Kingdom |
| Analytics and metadata | – | USA, United Kingdom |
| Notifications and email | Europe (country not stated) | USA, United Kingdom, Serbia |
| Support | Europe (country not stated) | Armenia, Australia, India, USA, South Korea, Japan, China |
| Group companies | Ireland | – |
| AI features | Germany, Europe (country not stated) | USA, United Kingdom, Singapore, Malaysia, Indonesia, Saudi-Arabia |
Ownership and agreements
| Headquarters | USA |
|---|---|
| Data processing agreement | Found and read |
| Certifications | ISO 22301, SOC 2, SOC 3, ISO/IEC 27001, ISO/IEC 27017, ISO/IEC 27018, BSI C5, CSA STAR, PCI DSS |