Data residency & regions
SafeHanded is hosted SaaS in the European Union (Germany and Finland, on Hetzner). Every organisation’s data is stored there; there’s no region to choose at sign-up.
What EU hosting covers
Section titled “What EU hosting covers”Your organisation’s data — requests, encrypted envelopes, audit log, branding and settings — is stored and processed in the EU. Some sub-processors are US-headquartered; where data reaches them, transfers rely on standard contractual clauses and equivalent safeguards. By design, an envelope is only ever ciphertext that SafeHanded can’t read, wherever it’s stored (see How SafeHanded protects secrets).
Subject data
Section titled “Subject data”The personal data SafeHanded holds about a subject is limited to what the handover needs: their name and email/UPN (and a phone number only where SMS is used), plus the encrypted payload. The payload is deleted on purge; the request record is kept for your audit retention period, then deleted. See Sub-processors & DPA.
Self-hosting
Section titled “Self-hosting”SafeHanded is offered as hosted SaaS only. Self-hosting isn’t offered.