10 days ago
Hi! We plan to use Railway Storage Buckets in the EU West (Amsterdam) region to store email attachments sent by our customers' customers (personal data under GDPR). Your docs say buckets run on Tigris. Could you confirm: (1) Is Tigris a sub-processor covered by Railway's DPA? (2) For a bucket in EU West (Amsterdam), are the objects stored and processed only in the EU? Tigris docs say metadata is replicated to all Tigris regions: does this apply to Railway buckets too, and which regions? Thanks!
1 Replies
10 days ago
Our published subprocessor list at trust.railway.com/item/subprocessors is the authoritative record of who processes data under our DPA. Please use that list to confirm Tigris's status for your processing records. Our docs confirm that buckets run on Tigris's servers and are encrypted at rest.
When you create a bucket, you pick its region, and it can't be changed later. ams is EU West, Amsterdam, Netherlands. We don't offer a contractual EU-only processing commitment on any plan, and the published DPA is the only data-processing agreement we offer.
Also note that application, deploy, build and HTTP logs are stored in US West no matter which region a service is deployed to.
Status changed to Awaiting User Response Railway • 10 days ago
Status changed to Solved matteo-serpentoni • 10 days ago