Is data ever stored in the United States?

Primary workspace hosting is in the EU. Some subprocessors may process limited data elsewhere under contractual safeguards; see the Privacy Policy international transfers section.

Contact account@ostrata.io for enterprise data processing agreements and security questionnaires.

Does EU residency apply to Google integrations?

Connected Google services follow Google’s terms and regions for Calendar, Gmail, and Drive. Workspace records in OSTRATA remain on EU infrastructure.

Where is Pilot AI processing?

AI requests may use configured model providers. Admins control model routing in platform settings. Ask us for current provider regions if you need them for procurement.

Workspace data hosted in Europe

Your CRM records live in the European Union. OSTRATA is designed and operated from Paris, France, with tenant isolation and privacy practices aligned to EU expectations.

Primary hosting

Workspace database and storage

Operator

Sublime Traders SAS, Paris

RLS

Tenant walls

Isolation at the database layer

European hosting, French roots

Workspace data in the EU. Operated from Paris.

Data residency is not a checkbox for teams selling into Europe. It is where records actually live, who operates the platform, and how access is governed when you scale members and integrations.

OSTRATA keeps workspace data in EU infrastructure, separates tenants at the database layer, and documents rights and subprocessors in our Privacy Policy. This page explains what that means in practice.

EU infrastructure
Primary workspace database and storage are hosted in the European Union.
Operated from France
Sublime Traders SAS, Paris. French law governs our terms with customers.
Tenant isolation
Row-level security keeps each workspace’s data separate on shared platform infrastructure.

Region

Where your workspace data lives

CRM records, attachments, and workspace configuration are processed on infrastructure located in the EU.

Database and object storage for workspaces stay in Europe
No per-tenant US-region silo required for standard use
Subprocessors listed in our Privacy Policy

Isolation

Built and run from France

OSTRATA is a product of Sublime Traders SAS, based in Paris.

Company registered in France (SIREN 917 821 340)
Terms governed by French law
Contact account@ostrata.io for residency questions

Governance

Isolation between workspaces

Multi-tenant does not mean shared records. Each workspace is a separate tenant boundary.

Row-level security enforced in Postgres
Permission profiles limit member and API key access
Cross-workspace reads blocked by default

GDPR

GDPR-aligned posture

We process personal data as controller for the service and support data subject rights.

Privacy Policy covers retention, transfers, and your rights
CNIL is the supervisory authority in France
International transfers use appropriate safeguards where required

Questions

Short answers before you request access.

Is data ever stored in the United States?: Primary workspace hosting is in the EU. Some subprocessors may process limited data elsewhere under contractual safeguards; see the Privacy Policy international transfers section.
Can we get a DPA?: Contact account@ostrata.io for enterprise data processing agreements and security questionnaires.
Does EU residency apply to Google integrations?: Connected Google services follow Google’s terms and regions for Calendar, Gmail, and Drive. Workspace records in OSTRATA remain on EU infrastructure.
Where is Pilot AI processing?: AI requests may use configured model providers. Admins control model routing in platform settings. Ask us for current provider regions if you need them for procurement.