Vendor profile
CrowdStrike: where is customer data stored and processed?
CrowdStrike's customer data storage is described in its Global Data Protection Agreement, which allows physical storage in the EU or the USA, but the choice is not clearly stated, and the older version (v6, May 2024) is the one found. The agreement has been read but does not state where data is stored, so the storage location comes from other sources or is not found. Customers outside the EU/EEA may have data stored in the USA. For Falcon Prevent for Home Use, information may be stored in the USA and other places where the provider's sub-processors have facilities. The STACKIT variant uses telemetry and detection processing in European data centres, country not given.
See the map and sourcesWhere data is stored and processed
| Activity | In the EU/EEA | Outside the EU/EEA |
|---|---|---|
| Storage | Europe (country not stated) | – |
| Logs and telemetry | Europe (country not stated) | – |
| Analytics and metadata | – | USA |
| Group companies | – | USA, India |
Ownership and agreements
| Headquarters | USA |
|---|---|
| Data processing agreement | Found and read |
| Certifications | PCI DSS |
Sources
- Adherence to Privacy Frameworks
- CrowdStrike and Schwarz Digits Partner to Deliver AI-Native and Sovereign Cybers
- CrowdStrike_Global DPA_ v6 (May_2024) 1 GLOBAL DATA PROTECTION AGREEMENT
- Scan Endpoint Data at Rest with Falcon Data Protection for Endpoint Data Discove
- CrowdStrike Falcon Prevent for Home Use — CrowdStrikers Privacy Notice
- GLEIF: CROWDSTRIKE INDIA PRIVATE LIMITED
- GLEIF: CROWDSTRIKE HOLDINGS, INC.