Where is your data stored?

When you use any software tool, data security and location matter, especially with growing compliance and privacy requirements.

Where your data is stored

All data in Scanfully is stored on secure servers within the European Union (EU). This includes user-generated content, personal data, usage data and system backups. The data is hosted in EU data centers with physical and digital security measures in place to protect it.

Which part runs where

• Scanfully’s servers, which run the checks on your sites and the API that the dashboard, the public API and the MCP server use, run on Amazon Web Services in the EU (Ireland).
• The database with your account, sites and monitoring results is hosted in Central EU (Frankfurt).
• Screenshots taken by the WooCommerce checkout checks are stored in Cloudflare R2, in its EU jurisdiction.
• Email from Scanfully, such as notifications and invoices, is sent through Mailgun’s EU service.
• The dashboard itself is served by Cloudflare. It is the app your browser loads; your data stays in the database above.
• Payments are handled by Stripe. Scanfully never sees or stores your card number.

Why store data in the EU?

1. Data privacy regulations and compliance. The EU has some of the strictest data privacy laws in the world, most notably the General Data Protection Regulation (GDPR). Storing data in the EU makes it easier for Scanfully to comply with the GDPR and similar requirements. See Is Scanfully GDPR compliant?
2. Reliability and security of EU data centers. The data centers Scanfully uses follow strict standards for reliability and uptime, and often carry certifications such as ISO/IEC 27001 (information security management).
3. Data control. Because data stays in the EU, there is less complexity around cross-border data transfer laws, which allows Scanfully to offer better data control and transparency.

How your data is protected

• Physical security: EU data centers have restricted access areas, check identification at the entrance, and use 24/7 surveillance.
• Encryption in transit: All data transferred to and from Scanfully’s servers is encrypted with HTTPS. The public API and the MCP server refuse requests that do not use it.
• Access control: Only authorized Scanfully personnel can access the server environments, and access logs are regularly monitored to detect unusual activity.
• Tokens: API tokens and the tokens of connected apps are stored only as a keyed hash, never as the token itself, and every token expires.
• Backups: Regular backups make sure data can be recovered after unexpected problems such as hardware failures. Backups are also stored within the EU.