Vendor profile
Zoho CRM: where is customer data stored and processed?
Zoho CRM is a business product, and the customer group is not stated. Customer data is stored in EU data centres for customers with an EU account, with Amsterdam stated as the primary data centre and Dublin as the second; for customers who register via zoho.com, data is stored in the USA. Customers can choose an EU account (zoho.eu), but Amsterdam is only assumed, not explicitly linked to zoho.eu. Two-factor login is provided by CLX in Ireland, Sweden and the USA, and by TeleSign in the USA (not confirmed). Support may be provided by staff in India, who get access to EU data under standard contractual clauses. Notifications are sent via Amazon SES in Ireland and the USA, BulkSMS in Ireland and South Africa, and Kaleyra in India.
Checked 13 October 2026 · based on the vendor's own public documents
See the map and sources
Where data is stored and processed
| Activity | In the EU/EEA | Outside the EU/EEA |
|---|
| Storage | Europe (country not stated), Netherlands | –
Only for customers in other regions: USA |
|---|
| Processing | Europe (country not stated), Germany | USA, Singapore, Canada, Australia
Only for customers in other regions: India |
|---|
| Login and user account | Ireland, Sweden | USA |
|---|
| Analytics and metadata | – | USA, Singapore, India |
|---|
| Notifications and email | Europe (country not stated), Ireland | USA, United Kingdom, India, South Africa |
|---|
| Support | Germany, Spain, Belgium | India, USA, Canada, United Kingdom, Singapore, Hong Kong, Australia |
|---|
| AI features | Netherlands | USA |
|---|
Only outside the EU/EEA, with no European alternative stated: Analytics and metadata.
Ownership and agreements
| Owner | ZOHO CORPORATION PRIVATE LIMITED (India) |
|---|
| Headquarters | India |
|---|
| Data processing agreement | Exists, but is not public |
|---|
| Certifications | ISO/IEC 27001, ISO/IEC 27017, ISO/IEC 27018, SOC 2 |
|---|
Sub-processors (19)
| Name | Country | Purpose |
|---|
| Amazon Simple Email Service (SES) | USA, Irland | E-postutsending |
| Amazon Web Services (CDN) | – | Innholdsdistribusjon (CDN) |
| BulkSMS | Irland, Sør-Afrika | SMS-utsending |
| Clickatell | Ireland | SMS-utsending |
| CLX Communications | Irland, Sverige, USA | Tofaktorautentisering (TFA) |
| Daxtra | Singapore | Parsing av CV og kandidatdata |
| Easy Post | USA | Frakt av varer |
| Google Translate | – | Oversettelse |
| Kaleyra | India | SMS-varsler til kunder |
| Litmus | USA | Forhåndsvisning av kampanjer i nettlesere |
| OpenTok | – | Sanntids videobehandling |
| Perfios | Singapore, India | Henting av banktransaksjoner |
| Postal Methods | USA | Utskrift og levering av fysiske dokumenter |
| Tata Communications | USA, Canada, Storbritannia, Tyskland, Sp | Innkommende telefoni |
| TeleSign | USA | Tofaktorautentisering (TFA) |
Sources