Where your data is hosted

One region for all laboratory data

All laboratory data in AccreditBook is held in a single cloud region: the database with your records and audit log, the stored files (certificates, reports, document versions, evidence) and the assessor packs you generate. The application servers that read and write that data run in the same region.

The region is confirmed before the first lab enters data, and is stated on the security page, in the data processing agreement and in this article. If your laboratory has a contractual or regulatory requirement for data to stay in a particular country, write to us before you sign up and we will tell you plainly whether we can meet it.

What runs where

Component	Location
Database (all records, audit log)	The hosting region
File storage (evidence, exports, imports)	The hosting region
Application servers that read and write your data	The hosting region
Weekly backup copy of stored files	A separate storage provider
Static parts of the web application (scripts, styles, fonts)	A global content delivery network; these files contain no laboratory data

Some services that support the product, such as card payments and transactional email, are run by subprocessors that process limited data (for example a billing email address) in their own regions. Each one, what it processes and where, is listed on the subprocessors page.

Why a single region

Keeping every record and file in one place, under one set of data protection laws, makes AccreditBook simple to describe in your clause 7.11 validation record and in a supplier evaluation under clause 6.6.

Documents you can request

• A data processing agreement, which includes the EU Standard Contractual Clauses and the UK Addendum for labs that need them: see /legal/dpa.
• The subprocessor list, with 30 days’ notice to lab owners by email before a change: see /legal/subprocessors.
• The infrastructure and backup statement in the validation pack: see Clause 7.11.

See Security for encryption, isolation and backups.