Arc’yon

Vendor profile

Cloudinary: where is customer data stored and processed?

Cloudinary stores and runs customer content mainly on AWS in the USA, with Google Cloud Platform also listed as a hosting sub-processor in the USA. Enterprise customers can optionally have storage and processing kept within the EEA, but the EEA countries are not stated and this is not the default. Customers can choose region for their enterprise setup. Support, error tracking, email sending, analytics and AI functions are handled by sub-processors listed in the USA, such as Zendesk, Datadog, SendGrid, Snowflake and OpenAI. The data processing agreement has been read and references EU SCCs, EU-US DPF and the sub-processor list, but it does not state where data is stored, so that information comes from other vendor sources.

Checked 24 October 2026 · based on the vendor's own public documents

See the map and sources

Where data is stored and processed

ActivityIn the EU/EEAOutside the EU/EEA
StorageEurope (country not stated)USA
ProcessingEurope (country not stated)USA
Logs and telemetry–USA
Analytics and metadata–USA
Notifications and email–USA
Support–USA
AI features–USA

Only outside the EU/EEA, with no European alternative stated: Notifications and email, Support, Logs and telemetry, AI features, Analytics and metadata.

Ownership and agreements

Data processing agreementFound and read
CertificationsSOC 2, ISO 14001

Sub-processors (24)

NameCountryPurpose
AWSUSAHosting Services
Google Cloud PlatformUSAHosting Services
Amazon CloudFront–CDN
Akamai–CDN
Cloudflare–CDN, WAF
Fastly–CDN
SnowflakeUSAData Warehouse
SendGridUSAEmail Automation
ZendeskUSACustomer Support
IntercomUSACustomer Support
DatadogUSAInfrastructure Monitoring
OpsGenieUSASupport Operations
PagerdutyUSASupport Operations
OpenAIUSASupport Operations
RollbarUSAError Tracking

Sources