Vendor profile

Fortinet: where is customer data stored and processed?

Fortinet stores customer data (Processor Data) in data centres that Fortinet says are mainly located in Canada, and the source names no other data centres. For FortiGate Cloud VM the customer chooses a region, Europe being one option without a country named. FortiDLP lists storage in the USA, Europe (Belgium) and the Middle East (Qatar, Saudi Arabia), with region chosen by the customer. FortiAppSec Cloud WAF uses an EU region (AWS Frankfurt) when the origin server IP is European, otherwise the USA. Fortinet Technologies India Private Limited, a subsidiary in Bangalore, is listed, but its role is not confirmed. The data processing agreement is not read, as it sits behind a login, and it is available only on request. No sub-processors are listed.

Checked 13 October 2026 · based on the vendor's own public documents

Where data is stored and processed

Only outside the EU/EEA, with no European alternative stated: Processing, Group companies, Login and user account.

Ownership and agreements

Sources

• fortinet.com
• Data Privacy Practices Fortinet Products and Services
• Data Storage Management
• GLEIF: FORTINET TECHNOLOGIES INDIA PRIVATE LIMITED
• GLEIF: FORTINET, INC.