Methodology and disclaimer
General information, not legal advice
This site summarises what vendors publish about where they store and process data. It is general information, not legal advice, and not a compliance ruling. Check the linked sources and your contract with the vendor, and get advice for your own situation.
What we check
Each tool page records six claims:
- Storage at rest
- Where the vendor says customer data is stored.
- Processing (incl. AI inference)
- Where the vendor says data is processed, including AI inference for AI tools.
- Support access
- Where the vendor says support or operations staff can access data from.
- Plan required
- Which plan or paid option the vendor says is needed for local storage.
- Exclusions
- Data the vendor says may be stored or processed outside the chosen region.
- IRAP status
- What the vendor publishes about an IRAP assessment (Australian Government security assessment).
How claims are sourced
- Every claim comes from the vendor's own public documentation.
- We quote the vendor's exact words, link the page they come from, and record the date we last checked it.
- Notes under a quote are our own plain-English context and are marked as notes.
- A claim with no source link or no checked date cannot be published: the site build fails. Our build also warns when a claim was last checked more than 90 days ago, so it gets rechecked.
What each status means
- Yes, in Australia
- The vendor says this happens in Australia.
- Partly
- The vendor says some of it happens in Australia, or it applies only to some data.
- Paid option
- Available, but only on a particular plan or paid option.
- Not in Australia
- The vendor says this happens outside Australia, or offers no Australian option.
- Not published
- The vendor does not say. This does not mean “no”.
- Unclear
- The vendor publishes something on this, but it does not settle the question.
“Not published” means the vendor doesn't say. It does not mean “no”. We never record a bare “no”: if we can't find a statement, the status is “Not published”.
The overall verdict at the top of a tool page comes from the storage and processing claims. A tool is only shown as stored and processed in Australia if both claims say so.
Review process
- New tool pages start as drafts and show a “Draft, not yet reviewed” banner.
- A person reviews every claim against its source and approves the verdict before the banner is removed.
- Each tool lists the vendor pages we watch for changes.
- A change to a claim is published only after review, and is recorded in the changelog with the date, the old and new status, and the source.
- If you think a claim is wrong, report a correction.
Sponsorship
A sponsored or featured listing is labelled “Sponsored”. Sponsorship never changes a claim or a verdict: verdicts are worked out from the claims only, and the sponsorship fields are not part of that calculation.
Where our own subscriber data is stored
Email alerts will be sent with Resend. Subscriber email addresses will be stored by Resend, which says:
Stored data is held in the United States. The region you select when adding a domain controls where email is sent from, not where it is stored.
Source: https://resend.com/security, checked . See the privacy page.