Data stored with Vault is maintained (at a minimum) on multiple devices across multiple facilities in a system designed to sustain the loss of data in one of the facilities, so that even large-scale natural disasters do not pose a threat to the integrity and security of our users' digital assets. While we do not disclose the exact locations of the facilities , our technical team partners with Amazon Web Services and utilizes their physical infrastructure.
Via Amazon S3, the service offers storage in several different regions within the United States (Virginia, Oregon, and Northern California) and locations around the world (Ireland, Singapore, Tokyo, Sydney, and Sao Paulo). Currently, our software automatically allocates data across the regions according to internal rules with heavy concentration in the US-based locations.
Many end users have expressed concerns about privacy requirements as mandated by the European Union. We recommend end users consult with their own legal and/or compliance advisors to determine whether our offering is appropriate for their use, noting that Amazon and AWS are participants in the Safe Harbor program developed by the U.S. Department of Commerce and the European Union and have certified that they adhere to the Safe Harbor Privacy Principles agreed upon by the U.S. and the E.U. (the Safe Harbor certification for Amazon.com and its controlled U.S. subsidiaries can be viewed on the U.S. Department of Commerce’s Safe Harbor Web site).
We are currently exploring additional functionality that would allow an end user to designate the specific region in which data associated with their account will be stored. Once released, this functionality will allow end users who are based in or governed by the EU to select the Ireland storage region for their data, in which case the data will never leave the EU.