# Is an EU region of a US cloud provider enough for data residency?

Storing data in an EU region keeps it physically in the EU, but a provider incorporated in the US may be subject to US law that reaches data it controls. Under Chapter V of the GDPR, transfers outside the EU need a legal basis such as the EU-US Data Privacy Framework or standard contractual clauses. Ask each vendor where data is stored, who can access it and which sub-processors are involved. NetSenX publishes its sub-processor list in its data processing agreement.

General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.

FAQ: [Data residency and trust](https://netsenx.com/en/faq/residency) · https://netsenx.com/en/faq/is-an-eu-region-of-a-us-cloud-enough-for-data-residency

## Read next

- https://netsenx.com/en/eu-data-residency
- https://netsenx.com/en/compliance

## Related questions

- [Does a network sensor send packet contents to the cloud?](https://netsenx.com/en/faq/does-a-network-sensor-send-packet-contents-to-the-cloud)
- [Can I get my data out when leaving a security vendor?](https://netsenx.com/en/faq/can-i-get-my-data-out-when-leaving-a-security-vendor)
- [What is the difference between data residency and data sovereignty?](https://netsenx.com/en/faq/data-residency-vs-data-sovereignty)
- [After the Schrems II ruling, can we still use security tools from US companies?](https://netsenx.com/en/faq/after-schrems-ii-can-we-use-us-security-tools)
- [Do a vendor’s data residency promises also cover logs, backups and support data?](https://netsenx.com/en/faq/are-admin-and-audit-logs-covered-by-residency-promises)