Docusift
Sign inStart free
Compliance

Data residency

Last reviewed: June 10, 2026. We keep this page current so procurement reviews can answer the residency question without an NDA.

Where Docusift stores customer data today

  • Primary region: AWS us-east-1(Northern Virginia). Application servers, the operational Postgres database, the S3 bucket holding uploaded documents, the search index, and the audit log all live here.
  • Backups: point-in-time recovery snapshots of Postgres remain in us-east-1 with 30-day retention. S3 object versioning is enabled in the same region. We do not cross-region replicate.
  • Operational logs & metrics: stored in CloudWatch in us-east-1 for 30 days, then expired.
  • Marketing site analytics: first-party, behind consent, stored at our analytics-host edge location.

Sub-processors that may receive data

See the sub-processors page for the live list, including the country in which each one operates and whether they are EU SCC counter-parties.

Cross-border transfers

Docusift is operated from India (Ekarche Private Limited). Data transferred between our operations in India and theus-east-1 production region is governed by Standard Contractual Clauses (EU SCCs 2021/914) where personal data of EU/UK data subjects is concerned, and by analogous data transfer mechanisms for other jurisdictions where applicable.

Planned regions

  • EU (eu-central-1, Frankfurt): available on Enterprise plans on request; provisioned per-tenant with a separate Postgres instance and isolated S3 bucket.
  • India (ap-south-1, Mumbai): available on Enterprise plans on request for customers with DPDP-2023 residency obligations under §16 transfers.
  • Other regions: we evaluate on a tenant-by-tenant basis. Email hello@docusift.co with the region and the data volume.

Where inference runs

Document content is sent to Microsoft Azure AI Foundry, provisioned by default in the East US region, for large-language-model inference. Microsoft is the sub-processor of record under the Microsoft Online Services Terms and the Microsoft Products and Services Data Protection Addendum, which include Standard Contractual Clauses for EU/UK transfers where applicable. Your data is not used to train Microsoft’s or any third-party foundation model, is not shared with the underlying model provider for their own purposes, and is processed solely to return the inference response. Enterprise customers can request a Foundry region matching their residency requirement (EU or India) as part of an Enterprise contract.