Vendor profile
Netlify: where is customer data stored and processed?
Netlify stores and runs customer content mainly on AWS in the USA, and backup is also provided by AWS in the USA. Customers outside the EU/EEA are the ones described as having these US transfers, under the DPA via DPF and SCC. The customer group is not stated, so this is not described as a consumer or business product. Customers can choose region, but the sources do not show an EU region for customer data. Login runs through WorkOS in the USA, email through SendGrid in the USA, and logs and telemetry through Axiom, Datadog and CrowdStrike in the USA. Analytics and metadata go to Amplitude, Segment, Snowflake, Fivetran and Salesforce, and AI services through Anthropic, OpenAI, OpenRouter and Kapa.AI, all in the USA. The DPA is read but does not state where data is stored.
Checked 12 October 2026 · based on the vendor's own public documents
See the map and sources
Where data is stored and processed
| Activity | In the EU/EEA | Outside the EU/EEA |
|---|
| Storage | – | –
Only for customers in other regions: USA |
|---|
| Processing | – | –
Only for customers in other regions: USA |
|---|
| Backup | – | –
Only for customers in other regions: USA |
|---|
| Login and user account | – | USA |
|---|
| Logs and telemetry | – | USA |
|---|
| Analytics and metadata | – | USA |
|---|
| Notifications and email | – | USA |
|---|
| AI features | – | USA |
|---|
Only outside the EU/EEA, with no European alternative stated: Login and user account, Notifications and email, Logs and telemetry, Analytics and metadata, AI features.
Ownership and agreements
| Headquarters | USA |
|---|
| Data processing agreement | Found and read |
|---|
| Certifications | SOC 2, ISO/IEC 27001, ISO/IEC 27018, PCI DSS |
|---|
Sub-processors (26)
| Name | Country | Purpose |
|---|
| Altinity, Inc / Clickhouse | USA | Managed ClickHouse database services, hosting |
| Amazon Web Services (AWS) | USA | Hosting, compute, storage, backup |
| Amplitude, Inc. | USA | Product analytics |
| Anthropic | USA | AI Services (Claude via API) |
| Automattic, Inc. (Akismet) | USA | Spam Filtering |
| Axiom | USA | Logging, tracing, monitoring |
| Crowdstrike, Inc. (Humio) | USA | Log Analysis |
| Datadog, Inc. | USA | Observability, monitoring |
| Dynatrace DevCycle | USA | Feature Flagging |
| Fivetran Inc. | USA | Data Services (ELT) |
| Google Cloud Platform GCP / Zencore Group, LLC | USA | Infrastructure Service Provider |
| Kapa.AI | USA | AI Servces (developer assistant) |
| Neon | USA | Database Hosting (Postgres extension) |
| NS1 | Flere (globalt) | Managed authoritative DNS |
| OpenAI | USA | AI Servces (GPT via API) |
Sources