Where your data is stored & who processes it
Where your data lives
Your customer data is processed and stored in the United States, the EU and India (DPA Annex 1).
The processing location for each individual sub-processor is listed at app.emergent.sh/subprocessors.
Region selection
You can choose your published app's hosting region yourself: click Re-publish to open the Manage Publishing panel, go to the Resources tab, and change the region there. The EU region is priced higher than the US region, so changing region changes your publishing cost.
Note
The hosting region applies to your published app. The processing locations of individual sub-processors are unchanged by it - see the list above. If you have a broader compliance requirement about where your data lives, contact privacy@emergent.sh.
Who processes your data
Our sub-processor list is published at app.emergent.sh/subprocessors. It names each sub-processor, what we use it for, and where it processes data.
You are kept informed of changes
We inform customers of intended additions or replacements by updating the published sub-processor list (DPA Section 8.2). The list is reviewed at least annually. You have 20 business days from notification to object to a new sub-processor on reasonable data-protection grounds, by writing to privacy@emergent.sh (DPA Section 8.3). This applies on every plan.
Emergent stays responsible
We remain fully liable to you for each sub-processor's performance, in line with Article 28(4) GDPR (DPA Section 8.6). Each sub-processor is bound by data-protection terms at least as protective as those in our DPA.
Note
For the current vendor list, purposes and processing locations, always check the live page: app.emergent.sh/subprocessors. If you have a question about a specific vendor, write to privacy@emergent.sh and link the entry.
