Vendor profile
Semrush: where is customer data stored and processed?
Semrush stores customer data (service data) in physically secured data centres in the USA, under SCC transfer basis according to the DPA section 6. AWS cloud storage in Ireland (Dublin) is also documented in the sub-processor list, but only for AWS. Analytics (Amplitude), business messaging (Intercom), and Google Cloud and BigQuery are documented as US-based sub-processors. The DPA is read but does not state where data is stored; the storage location comes from other sources. Location for backup, identity/SSO, support, and processing is not stated, and group companies are not named as sub-processors. The customer group and product are not specified in the source material.
Checked 12 October 2026 · based on the vendor's own public documents
See the map and sources
Where data is stored and processed
| Activity | In the EU/EEA | Outside the EU/EEA |
|---|
| Storage | Ireland | USA |
|---|
| Processing | – | –
Only for customers in other regions: USA |
|---|
| Analytics and metadata | – | USA |
|---|
| Notifications and email | – | USA |
|---|
Only outside the EU/EEA, with no European alternative stated: Analytics and metadata, Notifications and email.
Ownership and agreements
| Owner | Semrush Holdings, Inc. (USA) |
|---|
| Headquarters | USA |
|---|
| Data processing agreement | Found and read |
|---|
| Certifications | PCI DSS |
|---|
Sub-processors (9)
| Name | Country | Purpose |
|---|
| Amazon Web Services | USA, Irland | Cloud Storage |
| Amplitude | USA | Analytics service |
| Equinix | USA | Data Center |
| Google BigQuery | USA | Cloud warehouse |
| Google Cloud Platform | USA | Cloud storage |
| Intercom | USA | Business messaging |
| The Vanity Project LLC | USA | Merch websites management (kun Semrush Merch-brukere) |
Sources