This article explains how Celigo Private Cloud keeps your data within your selected region, which compliance standards apply, and what data protection measures are in place. It applies to Celigo Private Cloud customers.
Regional hosting
Celigo Private Cloud lets you host an instance of Celigo in your preferred region with encryption at rest and in transit, role-based access controls, and comprehensive audit logging. You can choose from a global network of data centers to meet regional compliance requirements, such as GDPR (General Data Protection Regulation) or CCPA (California Consumer Privacy Act). Regional hosting also reduces latency by placing your instance closer to operational centers or end users. You can specify your hosting region during onboarding to ensure data remains within the geographic boundaries required by applicable regulations. For the full list of supported locations, see Available Private Cloud locations below and Introduction to Celigo Private Cloud.
Standards compliance
Celigo Private Cloud provides compliance with the following global standards:
- SOC 2 Type II for secure data management.
- GDPR for data protection in the EU.
- CCPA for privacy requirements in California.
Celigo is targeting ISO/IEC 27001 (information security management) and ISO/IEC 42001 (AI management) certification for the entire Celigo Platform by Q1 2027.
Available Private Cloud locations
The following table lists the hosting locations Celigo can deploy your Private Cloud instance to. Your instance is provisioned in the selected location as part of onboarding. Select the location that meets your regional compliance and latency requirements during onboarding.
| Geography | Available locations |
| United States | Ohio; Northern California; Oregon |
| Canada | Central |
| Europe | London; Milan; Paris; Stockholm; Frankfurt; Ireland |
| Asia-Pacific | Seoul; Singapore; Sydney; Tokyo; Jakarta; Mumbai; Osaka |
| Africa | Cape Town |
| Middle East | Bahrain |
| South America | São Paulo |
| Israel | Tel Aviv |
For additional details on available regions, see Introduction to Celigo Private Cloud.
What data residency covers
This section explains what is included when you select a Celigo Private Cloud region, and clarifies where different types of data reside.
Customer data in the selected region: All customer data processed and stored by your Celigo Private Cloud instance remains within the geographic boundaries of your selected region. This includes integration configuration data, connection credentials, and error retry data.
Integration payloads: Temporary integration payloads (data in transit between your endpoints during a flow run) are processed within your selected region and are not persisted after the flow completes.
Logs, audit records, backups, and disaster-recovery copies: Logs and audit records generated by your Private Cloud instance are retained within your selected region. Backup and disaster-recovery copies are also maintained within the same geographic boundary to support regional compliance requirements.
Support personnel access: Celigo support personnel manage your Private Cloud instance to resolve incidents and provide technical assistance, but do not access customer data, unlike standard (multi-tenant) hosting. Infrastructure access is governed by Celigo's access control policies and is logged.
Telemetry and operational metadata: Operational metadata used for platform monitoring and performance management is processed within your Private Cloud environment.
Certifications and features by location: All listed Private Cloud locations support the same core compliance certifications (SOC 2 Type II, GDPR, CCPA). Availability of additional certifications or platform features may vary by location.
Requesting a region: You specify your preferred region during the Celigo Private Cloud onboarding process. See Get started with Celigo Private Cloud for onboarding steps.
Migrating between regions: Migrating an existing Private Cloud instance from one region to another is not currently supported.
Data protection measures
- Encryption: All data is encrypted at rest and in transit using strong encryption
- Access controls: Granular, role-based access control (RBAC) ensures only authorized users can access sensitive data.
- Audit logs: Comprehensive logging and monitoring provide visibility into data access and system activity for compliance reporting.
- Custom compliance configurations: If you have specific industry requirements, such as Health Insurance Portability and Accountability Act (HIPAA) for healthcare or Payment Card Industry Data Security Standard (PCI DSS) for payment data, Celigo can tailor your dedicated instance to support these requirements. This is configuration support, not a substitute for your own compliance certification or attestation.
Compliance monitoring and reporting
- Proactive monitoring: Celigo employs advanced monitoring tools to track the security and performance of private cloud instances, helping identify and resolve potential compliance risks proactively.
- Audit support: You can access logs, compliance documentation, and third-party certifications (such as SOC 2 reports) to facilitate internal and external audits. Celigo assists with compliance reviews or audits as needed.
- Incident response: Celigo's incident response plan ensures rapid detection, communication, and resolution of any security or compliance incidents. You will be promptly notified of incidents that could affect compliance.
Related articles
- Security and compliance
- Platform security guidelines
- Introduction to Celigo Private Cloud
- Get started with Celigo Private Cloud
- Celigo Trust Center