xMatters has established a regional data hosting process to explain where xMatters service information and client personally identifiable information (PII) can be hosted, and where other processing activities occur for storing, replicating backups, and log purposes.
xMatters Software as a Service (SaaS) resides and stores PII in Google Cloud Platform (GCP).
Click here for more information from GCP about their data centers.
| Economic Areas | GCP Data Center |
|---|---|
| European Economic Area (EEA) and Europe-Middle East-Africa (EMEA) | London (europe-west2) and Germany (europe-west3) |
| Asia-Pacific | Australia (australia-southeast1) and Singapore (asia-southeast1) |
| North America | South Carolina (us-east1) and Iowa (us-central1) |
| Information Type | Location |
|---|---|
| Account credentials and logs | Stored in the same region where the account is hosted |
| Profile Data | Stored in the same region where the account is hosted |
| Application Data | Stored in the same region where the account is hosted |
| Technical Support Tickets | North America |
| Client Corporate and Financial Information | North America |
| Incident Messaging Data | Stored in the same region where the account is hosted |
| SMS messages (includes content exchanged through xMatters SaaS) | Hosted by a sub-processor in the US and EU |
| Voice Notification | Hosted by a sub-processor in the US |
| Email Message for Distributing list | Hosted by a sub-processor in the US and EU |
xMatters maintains an up-to-date list of the names and locations of all sub-processors used for hosting or processing clients’ data. This list may be obtained by contacting compliance@everbridge.com.
Data centers for data backups are available in all economic areas (as specified above). Client and application data are typically backed up in a paired data center within the same economic region.
In Google Cloud Storage, data is retained for the duration of contract. Customer data is deleted through cryptographic erasure 60 days after termination.