Arc’yon

Vendor profile

OneSignal: where is customer data stored and processed?

OneSignal stores customer content on Google Cloud in the Netherlands (europe-west4), and the service also runs there. The data processing agreement is read and states that hosting is in the Netherlands via Google Cloud, with transfers to the USA under SCC and DPF. AI conversation quality and logging via Google BigQuery, kept up to 90 days, are documented as transferred to the USA. Support requests through Intercom, e-mail through Mailgun, and custom event data through Census are all processed in the USA, and the sub-processor list also names Cloudflare, Rollbar, Filestack and Twilio there. Backup location, identity location through WorkOS, and whether customers can choose a region are not stated. The customer group is not stated, and no ultimate owner is documented.

Checked 24 October 2026 · based on the vendor's own public documents

See the map and sources

Where data is stored and processed

ActivityIn the EU/EEAOutside the EU/EEA
StorageNetherlands–
ProcessingNetherlandsUSA
Logs and telemetry–USA
Analytics and metadata–USA
Notifications and email–USA
Support–USA
AI featuresNetherlandsUSA

Only outside the EU/EEA, with no European alternative stated: Support, Analytics and metadata, Logs and telemetry, Notifications and email.

Ownership and agreements

OwnerOneSignal, Inc. (USA)
HeadquartersUSA
Data processing agreementFound and read
CertificationsSOC 2, ISO/IEC 27001, ISO/IEC 27701

Sub-processors (8)

NameCountryPurpose
Intercom Inc.USACustomer support requests
Cloudflare Inc.USAContent delivery and internet security
Census Inc.USACustom events integration and Data Lake Provider
Google Inc.Nederland, USACloud hosting; AI feature inference (Gemini); AI conversation logging (BigQuery)
Rollbar Inc.USAProduct bug tracking
Filestack Inc.USAUpload files into API
Mailgun Inc.USAEmail delivery provider
Twilio Inc.USASMS/MMS delivery provider

Sources