zeroheight

Documents on the trust centre

What the vendor lists, typed; public items can be read now, the rest are available on request.

What the vendor says

Answers the vendor publishes to questions buyers ask, quoted with the link to where it says so.

• Where data is hosted or processed

  Where are your servers located?

  “Content uploaded to platform (where zeroheight acts as processor) is stored on AWS in Ireland (EU). We also have a secondary site available for failover on AWS in Germany (EU). Analytics data relating to use of the service (of which we are a controller) is processed in US, UK and EU. Any personal data transferred outside of the UK/EEA to a third country (such as the US) is done so using applicable transfer mechani...”

  Regions named: EU, UK, US, Ireland, Germanyas of 21 Sep 2026Source

• Encryption

  Do you encrypt data at rest?

  “All data at rest is encrypted via AWS-256 or greater (as per Data Management Policy). This includes backups. AWS Macie sweeps our S3 storage to detect and alert on any unencrypted data. All data in transit (internally and outbound) is encrypted with HTTPS TLS 1.2 or greater.”

  as of 21 Sep 2026Source