Vendor profile
Optimizely: where is customer data stored and processed?
Optimizely stores and processes customer data mainly in the USA and Europe, and customers can choose a European region for some services but not all. The customer group is not stated, so it is not confirmed whether the service is aimed at private individuals or businesses. The data processing agreement has been read but does not state where data is stored. MongoDB Atlas in the USA is used for some products, and transfers to the USA take place under the DPF. Login runs through Okta in the USA, notifications are sent partly through American email services, and Datadog and Sentry monitor logs in the USA. Support is provided from Vietnam, Bangladesh and Australia under SCCs. AI features run at Google Cloud in Europe when the customer chooses it.
Checked 12 October 2026 · based on the vendor's own public documents
See the map and sources
Where data is stored and processed
| Activity | In the EU/EEA | Outside the EU/EEA |
|---|
| Storage | Europe (country not stated) | –
Only for customers in other regions: USA |
|---|
| Processing | Europe (country not stated) | –
Only for customers in other regions: USA |
|---|
| Login and user account | – | USA |
|---|
| Logs and telemetry | Europe (country not stated) | USA |
|---|
| Analytics and metadata | – | –
Only for customers in other regions: USA |
|---|
| Notifications and email | Europe (country not stated) | –
Only for customers in other regions: USA |
|---|
| Support | – | Vietnam, Bangladesh, Australia |
|---|
| AI features | Europe (country not stated) | – |
|---|
Only outside the EU/EEA, with no European alternative stated: Login and user account, Support.
Ownership and agreements
| Headquarters | USA |
|---|
| Data processing agreement | Found and read |
|---|
| Certifications | ISO/IEC 27001, ISO/IEC 27017, ISO/IEC 27018, PCI DSS, SOC 2, TISAX |
|---|
Sub-processors (24)
| Name | Country | Purpose |
|---|
| Amazon Web Services Inc. | USA og Europa (kundevalg) | Sky-hosting og infrastruktur |
| Anthropic | – | Språkmodell (LLM) |
| Datadog | USA | Observability og varsling |
| FullStory | USA | Sesjonsopptak (kun USA-kunder) |
| Google Cloud | USA og Europa (kundevalg) | Skyleverandør |
| Google Gemini | – | Språkmodell (LLM) |
| Okta | USA | Brukerautentisering (OptiID) |
| Segment | USA | Kundedataplattform |
| Sentry | USA | Feilovervåking |
| Snowflake | Flere regioner (inkl. Europa) | Database |
| LogRocket | USA | Frontend-overvåking og sesjonsreplay |
| CloudFlare Inc. | Flere regioner | Content Delivery Network |
| Deutsche Telekom | Europe | SMS og RCS |
| Link Mobility | Europe | SMS-levering |
| Sinch Germany GmbH | Europe | SMS-levering |
Sources