Vendor profile
Postman: where is customer data stored and processed?
Postman stores and runs its cloud service mainly in the USA, with EU Data Residency for some Enterprise customers, where data is kept in Frankfurt, Germany. Backups are kept with AWS in the EU and in the USA, with deleted data retained for 15 days. Staff and contractors access data for operations and support from the USA, Australia, Brazil, Canada, India, Nigeria, the Philippines, Ukraine and the UK. The data processing agreement has not been read and no agreement was found in the pages retrieved, so it is unclear whether a standard DPA is available. Storage location is not stated for identity/SSO, notifications, Postman Private Cloud, standard-service telemetry and usage analytics, and sub-processor locations were not found because that list did not load. Customer group is not stated.
See the map and sourcesWhere data is stored and processed
| Activity | In the EU/EEA | Outside the EU/EEA |
|---|---|---|
| Storage | Germany | USA |
| Processing | Germany | USA |
| Backup | Europe (country not stated) | USA |
| Logs and telemetry | Europe (country not stated) | – |
| Support | – | USA, Australia, Brazil, Canada, India, Nigeria, Philippines, Ukraine, United Kingdom |
Ownership and agreements
| Owner | POSTMAN, INC. (USA) |
|---|---|
| Headquarters | USA |
| Data processing agreement | Not found on the vendor's website |
| Certifications | SOC 2, PCI DSS, CSA STAR, ISO/IEC 27001, ISO/IEC 42001 |