Security · Data location

Your data stays where you put it.

Your first agent picks the region for your organization. Agent machines and the firewall stay there, on encrypted disks.

Last reviewed November 2026
Regions

Seven cities, one region.

Your first agent picks the region, and later agents join it there, because your agents and your firewall share a private network that exists in one region only. To move to another region, ask us.

eu

Europe

Nuremberg or Falkenstein in Germany, or Helsinki in Finland.

us-east · us-west

United States

Ashburn, Virginia, or Hillsboro, Oregon. East and West are separate regions.

uk

United Kingdom

London.

ap

Asia-Pacific

Singapore.

1 of 4
Inventory

What lives where.

Agent memory & filesEncrypted disk on the agent's VM, in your region. Readable only inside your enclave.
CredentialsFirewall VM, in your region. OAuth tokens, passwords and model keys never leave the enclave.
Audit logFull log on the firewall VM, in your region. An index (timestamps, domains, verdicts) is mirrored to the control plane so the console can search it.
BackupsDaily for every agent and the firewall, encrypted with your enclave key and stored in Ireland (EU), whatever region your agents are in. Included in your plan. Recoverable locally with npx @controlclaw/recover.
Account & billingControl plane, United States. Name, email, team, plan, invoices. No agent content.
Model promptsSent from the firewall to the model provider you configured, under your own key and their data terms. We do not proxy or store them.
Subprocessors & retention

Short list, short memory.

Subprocessors. Compute and storage for enclaves in each region; a payments processor for billing; a transactional email provider for console notifications. Model providers are not our subprocessors: you contract with them directly. The current list is in the DPA, and we give 30 days' notice before adding one.

Retention. Agent data persists as long as the agent exists. Activity logs are kept for 30 days, or up to 1 year on request. Hourly totals are kept for 13 months. We keep the last 7 days of backups and the last 4 weeks. When you delete an agent, its disk and backups are erased within 24 hours; when you close your account, the enclave and everything inside it is destroyed within 30 days, and your encryption key with it.

Export. Any time, from the console: config, skills, memory and logs as plain files. Nothing proprietary in the format.

Need a region we don’t have yet? Tell us.

Start a 14-day trialTalk to us