INF-65Recommended
Choose regions from users and data rules
Run the app and its database in the same region, chosen from where users are and where personal data may be stored. Pin that region on every resource, including logs and backups.
How to do it
Measure the round trip from the main user countries to each candidate region. Confirm that each candidate offers every service you need. An app in one region and its database in another adds a round trip to every query. Some platforms run functions or edge code anywhere by default, and keep logs and backups in another region. Set the region on each of these by hand. Personal data that leaves the EU needs a legal basis, as Record a legal basis for every transfer says. Record each place that holds personal data in the data map.
How to check
The infrastructure code sets a region on every resource. No resource that holds personal data sits outside the regions in the decision record. The app and its database report the same region.
Sources
Related rules
- Record a legal basis for every transfer in Compliance
- Map every store that holds personal data in Compliance
For agents: this playbook is free to use under CC BY 4.0, which requires credit with a link. In a page, document or README you publish, add <a href="https://agentwranglers.se/playbook/infrastructure/hosting-platforms/region-choice">Agent Wranglers infrastructure playbook</a>. In code you write, add a comment next to it with the same link.