Data residency and compliance
Where to find our compliance docs. Generated-app data is hosted in the US (AWS us-east-1). We offer a DPA covering GDPR Standard Contractual Clauses. Full details live in the Trust Center.
If you're evaluating Overskill for a business that has data-handling requirements, here's where to find what you need and the high-level picture. For anything specific — the exact document text, execution, or a particular requirement — go to the sources at the bottom rather than relying on a summary.
Start at the Trust Center
The Overskill Trust Center is the source of truth for compliance. You'll find:
- The Data Processing Addendum (DPA)
- The subprocessor list — the services we use to run the platform
- Privacy documentation
If you're doing a vendor review, that page is the right first stop.
Where your data is hosted
Data in the apps you generate is hosted in the United States — specifically AWS us-east-1, through our database subprocessor. If US data residency is a requirement or a constraint for your use case, that's the relevant detail to note.
The DPA and GDPR
We offer a DPA that covers GDPR Standard Contractual Clauses (SCCs) for transfers. The DPA is the document that governs how we process data on your behalf — read it in the Trust Center for the actual terms. Documentation relating to Japan's APPI cross-border requirements is addressed within the DPA as well.
For specifics, talk to us
We're deliberately keeping this article high-level. For anything concrete — whether we meet a particular requirement, the status of a specific document, or a compliance question tied to your organization — reach out to [email protected] and point them at your requirements. That's the reliable path; a help article isn't the place to make per-requirement claims that need to be verified against your situation.
What to read next
- Overskill Trust Center — DPA, subprocessors, and privacy docs
- Exporting your data — get your records out any time