Trust Center sectionsData residency
Data residency and sovereignty
Data residency
Sensitive workloads run on our private cloud inside Tier 4-certified colocation facilities, connected to public cloud over private fiber. We can tell a regulator exactly which rack, in which country, holds your data, and that it never crosses the public internet.
United States
Switch
Primary US footprint for federal, HIPAA and SEC-regulated client workloads, running on 100% renewable energy.
United Kingdom
Ark Data Centres
UK sovereign hosting for GDPR, UK banking and DORA requirements, with physical failover independent of public cloud.
Australia
NextDC
Sydney hosting so Australian banks and super funds meet APRA CPS 234 and the Privacy Act without data leaving the country.
Public cloud (AWS, Azure, GCP) is used for scalable, less sensitive workloads and peak demand, under the same policy-as-code controls.
Which region and facility hold a particular client’s data is set out in that client’s agreement. The companies that process data on Moraph’s behalf are listed on the subprocessors page.
Have a question about this?
Ask Moraph’s Security team. Customers can also ask their Moraph contact.