Data residency and compliance

Where to find our compliance docs. Generated-app data is hosted in the US (AWS us-east-1). We offer a DPA covering GDPR Standard Contractual Clauses. Full details live in the Trust Center.

If you're evaluating Overskill for a business that has data-handling requirements, here's where to find what you need and the high-level picture. For anything specific — the exact document text, execution, or a particular requirement — go to the sources at the bottom rather than relying on a summary.

Start at the Trust Center

The Overskill Trust Center is the source of truth for compliance. You'll find:

  • The Data Processing Addendum (DPA)
  • The subprocessor list — the services we use to run the platform
  • Privacy documentation

If you're doing a vendor review, that page is the right first stop.

Where your data is hosted

Data in the apps you generate is hosted in the United States — specifically AWS us-east-1, through our database subprocessor. If US data residency is a requirement or a constraint for your use case, that's the relevant detail to note.

The DPA and GDPR

We offer a DPA that covers GDPR Standard Contractual Clauses (SCCs) for transfers. The DPA is the document that governs how we process data on your behalf — read it in the Trust Center for the actual terms. Documentation relating to Japan's APPI cross-border requirements is addressed within the DPA as well.

For specifics, talk to us

We're deliberately keeping this article high-level. For anything concrete — whether we meet a particular requirement, the status of a specific document, or a compliance question tied to your organization — reach out to [email protected] and point them at your requirements. That's the reliable path; a help article isn't the place to make per-requirement claims that need to be verified against your situation.

Was this helpful?

Thanks for the signal — it helps us improve the docs.

More in Advanced

Using OverSkill from AI agents (Claude, Cursor, Codex)

OverSkill is built for AI agents to use. Here's how to wire up Claude, Cursor, Codex, or your own agent.

Working with multiple apps

Patterns for managing several apps at once — organization, naming, sharing components.

OverSkill API errors and how to handle them

What 401s, rate limits, credit exhaustion, and other API errors look like — and the right way for your code (or your agent) to respond.

Still need help?

If this didn't answer your question, our team is one click away.