Hi, I am not sure if I can fulfil GDPR rules if I use Vercel. It seems a region can be set for edge functions, but what's with all the other things like caching services, logging, analytics, CDN and so one? Vercel seems to offer such a great package, but can't use it in this conditon from Europe. Any plans to improve the situation and allow a region for everything and data will not leak into US or other areas?
Thanks! Marco
Hi,
When building on Vercel, our build containers are run in a US region and all static files are hosted on our Edge Network across the globe and aren't just located to one specific region. Serverless functions can be restricted to one region for performance purposes, however this only affects serverless functions and not any other part of our infrastructure.
We'd recommend checking the requirement if it's for 'data processing', 'PII data storage' or 'all data including non-PII data' to confirm if this would meet those requirements. We also have more information regarding this on our Privacy Policy, including contact details for our privacy team if you require further information on specific policy questions you may have. https://vercel.com/legal/privacy-policy