Data Residency

Control where your data is stored geographically.

Available Regions

Region	Location	Compliance
us-east-1	Virginia, USA	SOC 2, HIPAA
us-west-2	Oregon, USA	SOC 2, HIPAA
eu-west-1	Ireland	GDPR, SOC 2
eu-central-1	Frankfurt	GDPR, SOC 2
ap-southeast-1	Singapore	SOC 2

Configuration

Organization Level

curl -X PATCH https://api.gateflow.ai/v1/management/organization \
  -H "Authorization: Bearer gw_prod_..." \
  -H "Content-Type: application/json" \
  -d '{
    "data_residency": {
      "primary_region": "eu-west-1",
      "allowed_regions": ["eu-west-1", "eu-central-1"],
      "prohibited_regions": ["us-*", "cn-*"]
    }
  }'

Per-Document

curl -X POST https://api.gateflow.ai/v1/data/documents \
  -H "Authorization: Bearer gw_prod_..." \
  -F "file=@document.pdf" \
  -F "region=eu-central-1"

Enforcement

Requests violating residency rules are blocked:

{
  "error": {
    "code": "data_residency_violation",
    "message": "Document cannot be stored in us-east-1"
  }
}

Next Steps

• GDPR Article 17 - Deletion rights
• Compliance Regimes - Regional compliance