Vendor profile

Exa Labs: where is customer data stored and processed?

Exa Labs' terms state that the service is operated by the company in the USA, but the storage location for customer content is not stated. The customer group is not specified in the material, and customers cannot choose a region. The data processing agreement is in the Trust Center behind a login and has not been read, so it cannot confirm storage location or sub-processors. No location is stated for backup, identity, support, notifications, or storage of customer content. The vendor cites SOC 2 Type II as a certification, but the sub-processor list is empty in the material. The most important missing item is where customer data is actually stored and processed.

Checked 24 October 2026 · based on the vendor's own public documents

Where data is stored and processed

Only outside the EU/EEA, with no European alternative stated: Processing.

Ownership and agreements

Sources

• exa.ai