Vendor profile
Automattic: where is customer data stored and processed?
Automattic stores data and runs backups in the USA through Amazon Web Services, which is the only sub-processor with a documented location in the data. The data processing agreement has been read, but it does not state where data is stored; the storage location comes from other sources. The agreement mentions Standard Contractual Clauses for sub-processors outside the EU and links to a sub-processor list. Processing location is not stated. Login via Google, Apple or GitHub, notifications from donotreply@wordpress.com and support have no stated location. Bubblestorm Management (WooCommerce) is named as a sub-processor in the agreement, but its location is not stated. Customer group is not stated.
Checked 24 October 2026 · based on the vendor's own public documents
See the map and sources
Where data is stored and processed
| Activity | In the EU/EEA | Outside the EU/EEA |
|---|
| Storage | – | USA |
|---|
| Backup | – | USA |
|---|
Only outside the EU/EEA, with no European alternative stated: Storage, Backup.
Ownership and agreements
| Headquarters | USA |
| Data processing agreement | Found and read |
| Certifications | SOC 1, SOC 2 |
|---|
Sub-processors (1)
| Name | Country | Purpose |
|---|
| Amazon Web Services | USA | Storage and backup of data |
Sources