Vendor profile
Bitwarden: where is customer data stored and processed?
Bitwarden stores encrypted vault data in Microsoft Azure, in the USA or the EU, and the service runs on Azure Kubernetes Service in the same regions. Customers outside the EU/EEA are given USA as the location, while European customers are given the EU, without a specific country stated. Email goes through Twilio SendGrid in the USA, and infrastructure monitoring through Datadog in the USA and EU. Payment data is processed by Stripe, PayPal/Braintree and BitPay in the USA, and sales analytics by ChartMogul in Germany. The data processing agreement is not readable because it sits behind a login, so the storage location in it is unconfirmed.
Checked 13 October 2026 · based on the vendor's own public documents
See the map and sources
Where data is stored and processed
| Activity | In the EU/EEA | Outside the EU/EEA |
|---|
| Storage | Europe (country not stated) | – Only for customers in other regions: USA |
|---|
| Processing | Europe (country not stated) | USA |
|---|
| Logs and telemetry | Europe (country not stated) | USA |
|---|
| Analytics and metadata | Germany | USA |
|---|
| Notifications and email | – | USA |
|---|
Only outside the EU/EEA, with no European alternative stated: Notifications and email.
Ownership and agreements
| Headquarters | USA |
| Data processing agreement | Exists, but is not public |
| Certifications | ISO/IEC 27001, SOC 2, SOC 3 |
|---|
Sub-processors (20)
| Name | Country | Purpose |
|---|
| Microsoft Corporation | USA, EU | Hosting infrastructure |
| Amazon Web Services, Inc. | USA | Hosting infrastructure |
| Fastly, Inc. | USA | Hosting infrastructure |
| Google, LLC | USA | Communication tools |
| Slack Technologies, Inc. | USA | Collaboration tool |
| Twilio, Inc. (SendGrid) | USA | Email service provider |
| Datadog, Inc. | USA, EU | Infrastructure monitoring |
| Zapier, Inc. | USA | Workflow automation |
Sources