Security, privacy and data
Where Scriboflow stores and processes data
Understand Scriboflow's primary database region and additional provider processing locations.
Last updated August 25, 2026
Scriboflow uses several infrastructure and service providers to deliver the application. Data processing is not limited to one country or to the European Union.
Primary database region
The primary production database region is Frankfurt, Germany. It stores account, organisation, contract, signing and related application data.
Additional provider processing
Other processing can take place in the United States and other global locations used by Scriboflow's providers and their subprocessors. This includes services used for:
- Application hosting and delivery
- File and generated-document storage
- Transactional email
- Identity-assisted signing when selected
- Billing and payment processing
- Operational monitoring and analytics
Supported network connections use TLS. Database and object-storage providers document encryption at rest for the services Scriboflow uses.
Provider roles, purposes, data categories, locations and transfer safeguards are documented in the current Subprocessor register. Read the Data Processing Agreement for the contractual terms that apply to customer-controlled personal data.
Related articles
Security, privacy and data
How Scriboflow protects your data
Understand the main safeguards Scriboflow uses to protect accounts, contracts and organisation data.
Security, privacy and data
Review Scriboflow's DPA and subprocessors
Find Scriboflow's Data Processing Agreement and current provider register.