Vendor profile
Cisco Duo: where is customer data stored and processed?
Cisco Duo stores customer content in data centres in Ireland, Germany, the United Kingdom, the USA, Canada, Australia, Japan, Singapore and India, and runs the service in the same countries. The customer group is not stated in the source material. The data processing agreement is not read: Duo's page refers to Cisco's Master Data Protection Agreement for subscriptions after 20 November 2019, but that agreement has not been reviewed. Cisco International Limited in the United Kingdom (Feltham) may process data as a group company, but this is not confirmed. Certifications listed are ISO/IEC 27001, 27017, 27018, SOC 2, SOC 3 and BSI C5. The customer can not choose region as far as the source material shows.
See the map and sourcesWhere data is stored and processed
| Activity | In the EU/EEA | Outside the EU/EEA |
|---|---|---|
| Storage | Ireland, Germany | United Kingdom, USA, Canada, Australia, Japan, Singapore, India |
| Processing | Ireland, Germany | United Kingdom, USA, Canada, Australia, Japan, Singapore, India |
| Login and user account | – | USA |
| Group companies | – | United Kingdom |
Ownership and agreements
| Owner | Cisco Systems, Inc. (USA) |
|---|---|
| Headquarters | USA |
| Data processing agreement | Not found on the vendor's website |
| Certifications | ISO/IEC 27001, ISO/IEC 27017, ISO/IEC 27018, SOC 2, SOC 3, BSI C5 |