Ackaia Corporation is headquartered in the United States and may use infrastructure and service providers in multiple countries. As a result, information associated with CipherDrive™ can be processed outside the country where you live.
Depending on your account, region, and the services involved, international processing can involve:
account and identity information;
authentication and security information;
operational metadata;
encrypted storage objects;
billing information;
email and communications;
support records;
monitoring and telemetry;
trust, safety, and legal-compliance records.
Not necessarily.
Product-specific region placement may describe where encrypted objects are stored or replicated, but it does not automatically mean that account, billing, security, support, or other operational information is processed only in that region.
Where required by applicable law, Ackaia may use recognized cross-border transfer mechanisms and safeguards such as:
adequacy decisions;
standard contractual clauses;
contractual and organizational protections;
technical safeguards;
transfer-risk assessments;
other lawful transfer mechanisms.
For supported encrypted-storage workflows, file contents are encrypted in the client before ordinary storage. This means an infrastructure provider or storage location can hold an encrypted object without necessarily having the user-controlled cryptographic material required to read the plaintext file.
Encryption does not eliminate privacy law or cross-border transfer requirements, but it can materially reduce exposure of stored content.
Authorities may issue legal requests according to applicable law and jurisdiction. Ackaia evaluates legal requests under its Legal Request Response Policy.
Ackaia may be able to provide account information or metadata that it lawfully possesses, but may be technically unable to provide plaintext CipherDrive files or user-controlled cryptographic keys that it does not possess.
Do not assume that using CipherDrive automatically satisfies a contractual, regulatory, professional, or sector-specific localization requirement.
If your organization requires specific residency, processing, transfer, healthcare, financial, government, or regulated-hosting commitments, verify the current product documentation and obtain any required written agreement before relying on the service for that use case.
Data residency and zero-knowledge answer different questions: one concerns location; the other concerns whether the storage provider ordinarily has the keys needed to read encrypted content.