Data Residency

Effective 17 June 2026

This page explains where your tenant data lives and how any cross-border processing is safeguarded. It complements our PDPL & GDPR posture and sub-processor list.

Primary storage

• Tenant operational data is held in a managed PostgreSQL database, encrypted at rest, with backups and point-in-time recovery.
• Application hosting and content delivery run on our cloud platform; static and media assets are served from object storage.

International transfers

Some sub-processors (for example, error monitoring or LLM providers powering the Atlas engine) may process limited data outside the UAE or EEA. Where they do, transfers are covered by appropriate safeguards — such as Standard Contractual Clauses and equivalent measures — and each sub-processor is bound by data-protection terms no less protective than our own.

Enterprise data-region requests

Enterprise customers with specific data-region or residency requirements can discuss options as part of procurement. Contact privacy@nelkins-os.xyz or your account manager, and request the Data Processing Agreement, which records the current sub-processors and transfer mechanisms.

Your controls

• Export your tenant data at any time in a machine-readable format.
• Request deletion on termination, subject to limited legal retention.