Vendor profile
Sophos Managed Detection and Response: where is customer data stored and processed?
Sophos MDR stores and processes customer content mainly on AWS in several countries, including the USA, the UK, Ireland, Germany, Canada, Australia, Japan, India, Brazil and the United Arab Emirates. The customer selects the hosting location during setup, and the provider has regions outside the EU/EEA that can be deselected. Usage analytics and session recordings from the web interface are handled by Fullstory in Germany and the USA, and support requests are handled by Genesys in Ireland and the USA, SendSafely in Germany and Foundever in Brazil and Argentina. Log data is handled by Logz.io in Germany, and operational metrics by Grafana Labs in the USA, Ireland and the UK. For generative AI, processing is assumed to take place in the same regions as the AWS hosting in Germany and Ireland.
See the map and sourcesWhere data is stored and processed
| Activity | In the EU/EEA | Outside the EU/EEA |
|---|---|---|
| Storage | Ireland, Germany, France | USA, United Kingdom, Canada, Australia, Japan, India, Brazil, United Arab Emirates, Switzerland |
| Processing | Ireland, Germany | USA, United Kingdom, Canada, Australia, Japan, India, Brazil, United Arab Emirates, Switzerland |
| Logs and telemetry | Germany, Ireland | USA, United Kingdom |
| Analytics and metadata | Germany, Ireland | USA |
| Support | Ireland, Germany | USA, Brazil, Argentina |
| AI features | Germany, Ireland | – |
Ownership and agreements
| Owner | Sophos Group PLC (United Kingdom) |
|---|---|
| Headquarters | United Kingdom |
| Data processing agreement | Not stated |
| Certifications | SOC 2 |