Vendor profile

SonarQube: where is customer data stored and processed?

SonarQube Cloud stores and runs customer content mainly in AWS Frankfurt for EU customers, and customers outside the EU/EEA can choose US hosting in Northern Virginia. The data processing agreement is read but does not state where data is stored; the storage location comes from other sources. Customers choose their region, and regions outside the EU/EEA can be deselected. Backups are stated for Ireland (EU) and the USA (US), with at least 30 days of retention, though Ireland is assumed from the region code. Identity runs through Okta in Australia, Ireland and the USA, and Clerk states global data location. Support runs through Atlassian Jira Service Management and SonarSource group entities in France, Germany, Ireland, Japan, Singapore, the UK and the USA.

Checked 16 October 2026 · based on the vendor's own public documents

Where data is stored and processed

Ownership and agreements

Sub-processors (16)

Sources

• Trust Center
• sub processors