Data is stored within a Microsoft Azure Data centre in the same legal boundary as the data controller’s Microsoft Office 365/Azure Active Directory tenant.  Additionally, DR copies of the data is Geo-replicated to a Microsoft Azure Datacentre within the same judicial data boundary. All customer personal data is stored on Microsoft Azure SQL Databases with Transparent Data Encryption 256 bit AES, and Microsoft Azure Storage Accounts with Storage Encryption 256 bit AES. Keys are managed by Microsoft. In addition, our sub-processors will hold personal data too and locations are available on the sub-processor list. We transfer personal data outside of the UK and EEA to third countries such as the US to help deliver our services. Where we do this we ensure transfers are in accordance with applicable data protection laws such as using applicable standard contractual clauses.