Privacy, security and sustainability
What the CLOUD Act is and why it matters
Include provider jurisdiction and contractual arrangements in a data-sovereignty review, alongside the physical hosting location.
The US CLOUD Act concerns access to electronic evidence and providers’ disclosure obligations. In a data-sovereignty review, provider jurisdiction and legal obligations matter alongside the physical location of servers.
Questions to ask a provider
Identify the contracting entity, hosting providers, subprocessors, processing locations and rules for responding to government requests. A location label alone does not answer all of these questions.
GreenPT describes its approach on the privacy page. For a specific deployment, ask for the applicable DPA, provider information and contractual commitments through contact.
Assess your requirements
Do not treat a short help article as a guarantee that no lawful request can ever apply. Your organisation’s legal or privacy adviser can assess jurisdiction and contractual requirements for the intended use.
The US Department of Justice CLOUD Act resources provide primary background on the legislation.
Need more help? Contact support or check service status.