Cloudly Data Residency

1. Australian Hosting Boundary

• Core application data is hosted within Australian infrastructure.
• Operational controls are implemented to maintain domestic processing boundaries.
• Data location expectations are aligned with customer contractual requirements.

2. Processing and Access Controls

• Access to customer data is role-based and logged.
• Administrative permissions are restricted by least-privilege principles.
• Data handling workflows are governed by security and privacy controls.

3. Retention and Deletion

Data retention settings are managed to meet legal and operational obligations. When data is no longer required, deletion and de-identification processes are applied in line with service governance procedures.