Data residency statement

Effective Date: May 15, 2026

Where your data lives

AEOSOS runs on serverless, globally distributed infrastructure. Different data categories live in different layers:

Data categoryPrimary storageNotes
Account metadata (tenant configuration, settings, profile)Managed database, primary region: ENAM (Eastern North America)Replicated within our North America infrastructure
Consent records and audit logsManaged database and object storage (ENAM region by default)Sealed so they cannot be altered after the fact; WORM-style retention objectives
Encrypted payload vaultEncrypted object storage (default location: ENAM)AES-256 at rest; signed URLs for retrieval
Edge cache and transient stateA global edge networkTTL-limited; no long-term storage
Logs and telemetryOur provider’s managed log infrastructureRetention as set out in the Data retention policy
Billing dataStripe, Inc. (US)AEOSOS does not store cardholder data

Customer choice of region

Default storage is our ENAM (Eastern North America) region. Customers requiring data residency in another region (for example WEUR for European customers requiring EEA-resident storage) may request alternate provisioning under an Enterprise contract. Contact team@stackpass.ai (subject: “Data residency / Enterprise”).

International transfers

For non-U.S. Customers and End Users whose Personal Data is Processed by AEOSOS, see DPA §11 (International Transfers). Standard Contractual Clauses, UK IDTA, and Swiss adaptations are incorporated by reference into the DPA.

Government access

AEOSOS is subject to U.S. law and may be compelled to disclose data in response to lawful U.S. legal process. We will, where lawful and reasonable: challenge overbroad or invalid demands; notify affected Customers of demands targeting their data where permitted; publish transparency information about government requests when we have material to report. Subprocessors are subject to their respective jurisdictions’ laws.

Contact

team@stackpass.ai — subject: “Data residency” or “Privacy”.

End of data residency statement. Last updated: May 15, 2026.