Vendor profile
Elasticsearch: where is customer data stored and processed?
Elasticsearch is a vendor product headquartered in the Netherlands and owned by Elastic N.V. The customer group is not stated in the sources, so it cannot be said whether the service targets private individuals. Customer content is stored and processed in Europe when the customer chooses a European region, but the country is not stated for these regions, and the USA is used only for customers outside the EU/EEA when US hosting is selected. The customer can choose the region for Elastic Cloud, and backups are stored in the same region as the deployment. Login is handled by Okta in the USA, alerts and workflow by Tines in the USA and Ireland, and support requests are handled among others in the USA, Ireland, the Netherlands, Costa Rica, Italy, Dubai and Poland.
See the map and sourcesWhere data is stored and processed
| Activity | In the EU/EEA | Outside the EU/EEA |
|---|---|---|
| Storage | Europe (country not stated), Belgium | – |
| Processing | Europe (country not stated) | – |
| Backup | Europe (country not stated) | USA |
| Login and user account | – | USA |
| Analytics and metadata | Ireland | USA, Singapore |
| Notifications and email | Ireland | USA |
| Support | Ireland, Netherlands, Italy, Poland, Sweden, Norway, Germany, France, Spain, Denmark | USA, Costa Rica, Forente arabiske emirater, Saudi-Arabia, Brazil, India, Mexico, Israel, China, Switzerland, Canada, Hong Kong, Japan, South Korea, United Kingdom, Singapore, Australia |
| AI features | Belgium | USA, Singapore |
Ownership and agreements
| Owner | Elastic N.V. (Netherlands) |
|---|---|
| Headquarters | Netherlands |
| Data processing agreement | Not found on the vendor's website |
| Certifications | ISO/IEC 27001, ISO/IEC 27017, ISO/IEC 27018, ISO/IEC 27701, SOC 2, SOC 3, PCI DSS, FedRAMP, CSA STAR, TISAX, Cyber Essentials, IRAP |
Sub-processors (17)
| Name | Country | Purpose |
|---|---|---|
| Amazon Web Services, Inc. | Kundevalgt | Hosting (other than in Europe, the Middle East, and Africa) |
| Amazon Web Services EMEA SARL | Kundevalgt | Hosting (in Europe, the Middle East, and Africa) |
| Google Ireland Limited (GCP) | Kundevalgt | Hosting |
| Microsoft Corporation (Azure) | Kundevalgt | Hosting |
| Tines Automation, Inc. | USA | Enterprise workflow automation based on alerts |
| Tines Security Services Limited | Ireland | Enterprise workflow automation based on alerts |
| Salesforce.com, Inc. | USA | Customer support ticketing via Service Cloud |
| Google LLC (GCP) | USA | Hosting and inference for embeddings, rerank, and related public API services(ap |
| Supabase, Inc. | USA | Account, API key, and prepaid-wallet database |
| MongoDB, Inc. | USA, Belgia | Caching layer and database for Jina Reader |
| Serper | USA, Singapore | SERP API (Google Search) for Jina Search |
| ThorData | – | Residential proxy when Reader cannot fetch a URL directly |
| International Business Machines Corporation (IBM Cloud (Softlayer)) | USA | Hosting |