# How does NetSenX handle GDPR, and where is my data stored?

Customer data is stored in the EU: the database in Ireland (AWS eu-west-1) and the API in Frankfurt (Germany) and Paris (France). NetSenX analyses network metadata and never decrypts encrypted traffic; a data processing agreement under GDPR Article 28 and the sub-processor list are published, and the DPO is reachable at dpo@netsenx.com. Payment and e-mail sub-processors operate under EU Standard Contractual Clauses, and some AI Analyst capabilities use a provider outside the EU only with your explicit consent. GDPR is assessed for your processing as a whole, so we do not claim a certificate for it.

General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.

FAQ: [Data residency and trust](https://netsenx.com/en/faq/residency) · https://netsenx.com/en/faq/how-does-netsenx-handle-gdpr-and-where-is-my-data-stored

## Read next

- https://netsenx.com/en/eu-data-residency
- https://netsenx.com/en/compliance

## Related questions

- [Where is my data stored?](https://netsenx.com/en/faq/where-is-my-data-stored)
- [Can I bring my own encryption keys (BYOK)?](https://netsenx.com/en/faq/can-i-bring-my-own-encryption-keys-byok)
- [Where does NetSenX store customer data?](https://netsenx.com/en/faq/where-does-netsenx-store-customer-data)
- [Does any data leave the EU?](https://netsenx.com/en/faq/does-any-data-leave-the-eu)
- [Is EU data residency enough for GDPR?](https://netsenx.com/en/faq/is-eu-data-residency-enough-for-gdpr)