Arc’yon

Vendor profile

Fortigate FortiVPN: where is customer data stored and processed?

Fortinet, Inc. is headquartered in the USA. Customer data for FortiVPN is not confirmed to be stored in any specific country; Fortinet's privacy statement says processor data for non-EU/EEA customers is primarily in Canada, but this is not specific to FortiVPN. The processing of FortiVPN data in the USA is not confirmed either, though data transfers from the EEA to the USA are referenced under the DPF. The customer group is not stated, and no certifications are listed. A data processing agreement is available on request but has not been reviewed. Backup location, identity/SSO, support, notification and telemetry locations are not stated for FortiVPN, and several sub-processors such as AWS, Microsoft, Okta and Zendesk are listed without FortiVPN-specific location details.

Checked 11 October 2026 · based on the vendor's own public documents

See the map and sources

Where data is stored and processed

ActivityIn the EU/EEAOutside the EU/EEA
Storage––
Only for customers in other regions: Canada
Analytics and metadata––
Only for customers in other regions: USA, Canada

Ownership and agreements

OwnerFortinet, Inc. (USA)
HeadquartersUSA
Data processing agreementExists, but is not public
CertificationsNone found

Sub-processors (30)

NameCountryPurpose
Amazon Web Services, Inc.USA, Tyskland, AustraliaCloud Hosting and Infrastructure
Cloudflare, Inc.–Cloud Infrastructure and Security
Google LLC–Cloud Hosting and Infrastructure
Medallia, Inc.USACustomer Success
Microsoft CorporationUSACloud Hosting and Infrastructure
New Relic, Inc.USACloud Hosting and Infrastructure
OneTrust, LLCUSAPrivacy Operations
Okta Inc.USACustomer Authentication
Snowflake, Inc.USA, Tyskland, AustraliaCloud Hosting and Infrastructure
Thoughtspot Inc.USAData Analytics
Zendesk, Inc.USACustomer Support
Zoom Video Communications, Inc.USACustomer Communication
Google Cloud–Cloud infrastructure
Microsoft Azure–Cloud infrastructure
ObserveUSALogging

Sources