Does an EU MSP need an EU-hosted security vendor for its clients?
Not always by law, but often by contract and by client expectation, so check what your clients require before you choose. Security tools handle network metadata, which can be personal data under the GDPRGDPR: General Data Protection Regulation. The EU data protection law (Regulation (EU) 2016/679).; transfers outside the EU are possible with safeguards, but many clients, especially in the public sector, health and finance, prefer or require EU storage and a clear list of sub-processors. Ask each vendor where data is stored, which sub-processors are used and where they are incorporated, and what you get back when you leave. NetSenX stores customer data in the EU, with the database in Ireland and the API in Frankfurt and Paris, and publishes its data processing agreement with the full sub-processor list.
Read next
Related questions
- How can an MSP show clients which AI tools their staff use?
- Can an MSP offer OT monitoring to small manufacturers?
- What does an MSP need to monitor a client's PLCs passively?
- What happens to a client's security data when they change MSP, and can they export or delete it?
- What is the difference between an MSP and an MSSP?
Terms used here
- GDPR (General Data Protection Regulation)
- The EU data protection law (Regulation (EU) 2016/679).