Arc’yon

Vendor profile

Rapid7: where is customer data stored and processed?

Rapid7 stores and runs customer data mainly with AWS in several countries, including Australia, Canada, Germany, Ireland, Japan and the USA, and with Google Cloud in the EU. The documentation does not state which country the customer can choose; customers can choose region, but regions outside the EU/EEA can be opted out of. Login is through Okta in the USA, and support services, email sending and AI language models are listed as USA-based, while some support functions are also in the EU. The data processing agreement has been read, but does not state where data is stored. Backup storage location is not stated.

Checked 12 October 2026 · based on the vendor's own public documents

See the map and sources

Where data is stored and processed

ActivityIn the EU/EEAOutside the EU/EEA
StorageGermany, Ireland, Europe (country not stated)USA
Only for customers in other regions: Australia, Canada, Japan
ProcessingGermany, Ireland, Europe (country not stated)Australia, Canada, Japan, USA
Only for customers in other regions: Australia, Canada, Japan
Login and user account–USA
Logs and telemetry–United Kingdom, USA
Analytics and metadataEurope (country not stated)USA
Notifications and email–USA
SupportEurope (country not stated)USA
AI features–USA

Only outside the EU/EEA, with no European alternative stated: AI features, Login and user account, Logs and telemetry, Notifications and email.

Ownership and agreements

HeadquartersUSA
Data processing agreementFound and read
CertificationsSOC 2

Sub-processors (48)

NameCountryPurpose
Amazon Web Services (AWS)Australia, Canada, Tyskland, Irland, JapCloud Hosting
AnthropicUSAAI Language Model Services
ARMO SecurityEUContainer and Cloud Security
Ask-AIUSACustomer Support
BoxUSACloud-based content management
CiscoStorbritannia, USANetwork Security and Identity Management
ConcentrixUSA, EUCustomer Support
ConfluentUSACloud-based streaming platform
DatadogUSAMonitoring Analytics
DialpadUSAVoIP
FreshworksUSACustomer Communications and Ticketing
GongUSA, EUCRM
Google CloudUSA, EUCloud Hosting
Google WorkspaceUSA, EUProductivity Suite
Grafana LabsUSAData Visualization and Monitoring

Sources