Europe
Residency is where it runs, not where we promise.
RotaGrant is deployed in your environment — a European cloud region, your own data centre, or airgapped. There is no European tenancy of a platform we operate, because there is no platform we operate that holds your data.
What that answers
- Transfers
- There are none to assess. No payload reaches us on any path, so the Chapter V analysis that consumes most vendor reviews does not start.
- Residency and jurisdiction are separate
- A German bank on a European cloud and one on-premise are under identical law and radically different network posture. The platform models both rather than conflating them into a region setting.
- The AI Act, mapped
- Fourteen clauses, scored over the obligations that currently apply, with the ones deferred to December 2027 stated beside the number rather than averaged into it. See the instrument page.
- GDPR, including Art. 32(1)(d)
- The clause asking you to regularly test the effectiveness of technical measures — evidenced by the adversarial grid against our own detector, published with the cells it fails.