Data Residency

How we ensure your data is processed and stored in compliance with regional data protection laws.

Detected Region:
Last Updated: 12/1/2024
1. Data Residency Overview

AiLex implements comprehensive data residency controls to ensure your personal and professional data is processed and stored in compliance with regional data protection laws.

Key Principles:

  • Regional Processing: Data is processed in your geographic region
  • Compliance First: All processing complies with local data protection laws
  • Transparent Controls: Clear visibility into where your data is stored
  • User Control: You can request data location changes where legally permissible
2. Regional Data Centers
🇺🇸

United States

US-based users with data stored in US data centers

AWS US-East-1 (Virginia) and US-West-2 (Oregon)
SOC 2 Type II
CCPA
HIPAA (where applicable)
State Privacy Laws
🇪🇺

European Union

EU-based users with data stored in EU data centers

AWS EU-Central-1 (Frankfurt) and EU-West-1 (Ireland)
GDPR
ISO 27001
SOC 2 Type II
EU Data Protection Laws
🇬🇧

United Kingdom

UK-based users with data stored in EU data centers

AWS EU-West-2 (London) and EU-Central-1 (Frankfurt)
UK GDPR
Data Protection Act 2018
ISO 27001
SOC 2 Type II
🇨🇦

Canada

Canadian users with data stored in US data centers

AWS US-West-2 (Oregon) and CA-Central-1 (Canada)
PIPEDA
Provincial Privacy Laws
SOC 2 Type II
3. Data Types and Processing

Personal Data:

  • Account Information: Stored in your regional data center
  • Professional Credentials: Processed according to regional licensing requirements
  • Billing Data: Processed by regional payment processors
  • Communication Data: Stored in regional data centers with encryption

Professional Data:

  • Legal Documents: Processed and stored in your region with attorney-client privilege protections
  • Case Information: Subject to regional confidentiality and professional responsibility rules
  • AI Interactions: Processed in-region with anonymization for model improvement
  • Usage Analytics: Aggregated and anonymized data may be processed globally
4. Cross-Border Data Transfers

Limited Transfers:

We minimize cross-border data transfers. When transfers are necessary, we implement appropriate safeguards:

  • EU to US: Standard Contractual Clauses (SCCs) and adequacy decisions
  • US to EU: GDPR compliance mechanisms and data processing agreements
  • Service Providers: All vendors must comply with regional data protection requirements
  • Emergency Access: Limited to legal compliance and security incidents

Transfer Safeguards:

  • Encryption in transit and at rest
  • Access controls and audit logging
  • Data minimization principles
  • Regular compliance assessments
5. Compliance Frameworks

Regional Compliance:

🇺🇸 United States

  • • California Consumer Privacy Act (CCPA)
  • • Virginia Consumer Data Protection Act
  • • Colorado Privacy Act
  • • HIPAA (healthcare data)
  • • SOC 2 Type II

🇪🇺 European Union

  • • General Data Protection Regulation (GDPR)
  • • ePrivacy Directive
  • • Digital Services Act
  • • ISO 27001
  • • SOC 2 Type II

Professional Standards:

  • ABA Model Rules of Professional Conduct (US)
  • EU Legal Services Directive
  • Attorney-client privilege protections
  • Professional confidentiality requirements
6. Your Data Residency Controls

Available Controls:

  • Region Verification: View your current data processing region
  • Data Location Requests: Request data location changes where legally permissible
  • Transfer Notifications: Receive notifications of any cross-border transfers
  • Compliance Reports: Access compliance documentation and certifications

How to Exercise Controls:

  • Contact our Data Protection Officer at [email protected]
  • Use the data residency controls in your account settings
  • Submit requests through our privacy portal
  • Contact customer support for assistance

Response Time: We will respond to data residency requests within 30 days.

Data Residency Questions?

Data Protection Officer: [email protected]

Compliance Team: [email protected]

AiLex Legal ServicesLast Updated: 12/1/2024Version 1.0