This article explains where Canto stores customer data, which AWS regions are available, and how sub-processors are governed.
Hosting infrastructure
All Canto platform data is hosted on Amazon Web Services (AWS). Canto does not operate its own data centers. AWS provides the underlying compute, storage, and network infrastructure, and is Canto's primary infrastructure sub-processor.
Canto reviews AWS security reports and maintains up-to-date contracts and documentation with AWS as part of its vendor risk management program.
Available hosting regions
Canto hosts customer data in the following AWS regions:
| AWS Region | Location | Typically serves |
|---|---|---|
| eu-west-1 | Ireland | EU customers |
| eu-central-1 | Germany | EU customers |
| us-west-2 | USA | North American customers |
| ca-central-1 | Canada | Canadian customers |
| ap-southeast-2 | Australia | Asia-Pacific customers |
If you're unsure which region your account uses, contact your Account Manager or submit a request via the Help Center.
What is a sub-processor?
A sub-processor is a third-party company that Canto engages to process customer data as part of delivering the Canto platform. Sub-processors act under Canto's instruction and are contractually required to protect customer data to the same standard as Canto itself, as set out in the Data Processing Agreement (DPA).
How Canto governs sub-processors
Before engaging any sub-processor, Canto conducts due diligence covering security posture, compliance certifications, and data protection practices. Once engaged, sub-processors are contractually required to:
- Process customer data only as instructed by Canto, and for no other purpose
- Implement technical and organizational security measures appropriate to the risk
- Not sub-contract data processing further without Canto's prior consent
- Support Canto in responding to data subject requests and security incidents
- Submit to audits and provide documentation on request
These obligations are set out in data processing agreements that Canto enters into with each sub-processor.
Sub-processor change notifications
Canto provides at least 30 days' prior written notice before adding or replacing a sub-processor. Notifications include details of the processing the new sub-processor performs, giving you the opportunity to raise objections on reasonable and legitimate grounds — for example, if the addition of a sub-processor would create a conflict with applicable data protection law.
To object to a proposed sub-processor change, contact Canto at privacy@canto.com within the notice period and include a description of your specific concerns.
|
Please note: The 30-day notice obligation and the right to object are set out in your Data Processing Agreement. If you have not yet signed a DPA, or need a copy of your executed DPA, request one from your Account Manager (existing customers) or Sales Representative (prospective customers). |
Finding the current sub-processor list
To view the current sub-processor list, visit trust.canto.com.
International data transfers
Where customer data is transferred to a sub-processor located outside the European Economic Area (EEA) or another jurisdiction with an adequacy decision, Canto ensures appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- The EU–US Data Privacy Framework (DPF), where the relevant sub-processor is certified
- UK International Data Transfer Agreements (IDTAs), where applicable
Details of the transfer mechanisms applicable to each sub-processor are set out in the DPA.
Frequently asked questions
Can I choose which AWS region my data is stored in?
Yes. The hosting region is agreed during onboarding. If you have specific data residency requirements, discuss them with your Account Manager before your agreement is finalized.
Does Canto store any customer data outside AWS?
AWS is Canto's primary infrastructure sub-processor and all platform asset data is stored in AWS. The full list of sub-processors, including the data each one processes, is available in the Trust Center.
How will I be notified if Canto adds a new sub-processor?
Canto provides at least 30 days' prior written notice of any new or replacement sub-processor. Notice is sent to the authorized contact on your account.
Can I object to a new sub-processor?
Yes. If you have reasonable and legitimate grounds — for example, if the proposed sub-processor would conflict with applicable data protection law — contact privacy@canto.com within the 30-day notice period with a description of your concerns. Canto will work with you to address the objection.
Where can I find the Data Processing Agreement?
The DPA is incorporated by reference into the standard Master Services Agreement. To request a copy, contact your Account Manager or Sales Representative.