Vendor profile
LastPass: where is customer data stored and processed?
LastPass stores and processes customer vaults on AWS in several regions, including the USA (default), Ireland, Germany, the UK, India, Singapore, Australia and Canada, and the data processing agreement, which is read, does not state where data is stored. The data processing agreement is dated 1 August 2022 and refers sub-processors to the Trust Center; the storage locations come from the provider's other pages. Customers choose region only in part, as the sources do not show whether customers can select their data region. Login runs on Microsoft Azure in the USA, with dark-web credential monitoring by PasswordPing (Enzoic) in the USA, Ireland and Japan (the Japan location is not confirmed).
Checked 12 October 2026 · based on the vendor's own public documents
See the map and sources
Where data is stored and processed
| Activity | In the EU/EEA | Outside the EU/EEA |
|---|
| Storage | Ireland, Germany | –
Only for customers in other regions: USA, United Kingdom, India, Singapore, Australia, Canada |
|---|
| Processing | Ireland, Germany | –
Only for customers in other regions: USA, United Kingdom, India, Singapore, Australia, Canada |
|---|
| Login and user account | Ireland | USA, Japan |
|---|
| Logs and telemetry | – | USA |
|---|
| Analytics and metadata | – | USA, United Kingdom, Israel |
|---|
| Notifications and email | – | USA |
|---|
| Support | – | USA, Guatemala, Philippines |
|---|
Only outside the EU/EEA, with no European alternative stated: Notifications and email, Logs and telemetry, Analytics and metadata, Support.
Ownership and agreements
| Headquarters | USA |
|---|
| Data processing agreement | Found and read |
|---|
| Certifications | ISO/IEC 27001, SOC 2, SOC 3, ISO/IEC 27701 |
|---|
Sub-processors (25)
| Name | Country | Purpose |
|---|
| Microsoft Azure | USA | Cloud hosting, brukeridentiteter |
| Akamai Technologies, Inc. | – | Global Traffic Management og DDoS-beskyttelse |
| Amplitude Inc. | USA | Produktytelsesanalyse |
| CyberSource Corporation | USA | Eksportkontroll og svindelforebygging |
| DataBricks, Inc. | USA | Cloud Data Platform |
| DataDog, Inc. | USA | Observability for skyapplikasjoner, logging og analyse |
| PasswordPing, Ltd. (Enzoic) | USA | Overvåking av brukerlegitimasjon (dark web) |
| Pendo.io, Inc. | USA | Produktmeldinger og onboarding |
| Segment.io, Inc. | USA | Datastyringsplattform |
| Twilio, Inc. (SendGrid) | USA | E-post og SMS-varsler |
| Atlassian Pty Ltd (Jira) | USA | Ticketing-plattform |
| Avtex Solutions, LLC (Genesys Cloud) | USA | Telefonsenter |
| Drift.com, Inc. | USA | Kundechat og support |
| Gainsight, Inc. | USA | Kundesuksess og kundeopplevelse |
| Google, Inc. | USA | Forretnings- og krasjanalyse |
Sources