---
title: "Where your data is hosted, and how it is protected"
description: "Where Conphora keeps product data and documents, who can see them, what happens to them when a subscription ends, and how Conphora complies with the GDPR."
type: "help"
url: "https://www.conphora.com/help/getting-started/data-hosting-and-security/"
markdown: "https://www.conphora.com/help/getting-started/data-hosting-and-security.md"
locale: "en"
language: "en"
updated: "2026-10-05"
author: "Conphora support"
publisher: "Conphora"
tags: ["help", "getting-started", "visitor"]
license: "Free to quote with attribution and a link to the page"
---

# Where your data is hosted, and how it is protected

> Where Conphora keeps product data and documents, who can see them, what happens to them when a subscription ends, and how Conphora complies with the GDPR.

## In short

Your data is hosted in the EU: the website, the platform's application data and your uploaded documents are kept with Scaleway in France. Conphora processes your data only to deliver the service, never sells it, and deletes nothing when a subscription ends unless you ask for it.

- Hosting: Scaleway SAS, France (EU). Every vendor that processes data for us is listed on the Sub-processors page.
- Conphora does not sell your data; access is restricted to the people and vendors who need it to run the service.
- Cancelling a subscription does not delete your products or documents; an organisation admin can request deletion.

## Where your data is hosted

conphora.com, the platform's application data and the documents you upload are hosted with Scaleway SAS in France, inside the EU. A few vendors process limited data outside the EU — the sign-in provider that holds your account details, for example — and they do so under the European Commission's Standard Contractual Clauses or the EU-U.S. Data Privacy Framework. The [Sub-processors](/sub-processors) page lists every vendor, what it handles and where.

## How it is protected

Conphora uses appropriate technical and organisational security measures to protect data against unauthorised access, loss, misuse and alteration. Access is restricted to the people and vendors who need it to run the service. Within your own organisation, an admin decides who is a member and what each role can do; see [Organisations, roles and invitations](/help/getting-started/organisations-and-invitations).

## Can Conphora see my product data?

Conphora processes your data to deliver the service — validation, document matching, reports. We do not sell your data to anyone. For the data your organisation keeps in the platform, your organisation is the data controller and Conphora is its processor under the data processing agreement in the [terms of use](/terms).

## What happens to the data when a subscription ends

Cancelling does not delete anything. The organisation, its products and its documents stay in place, and you can start the subscription again later. If you want the organisation's data deleted, an admin requests that in the platform under Settings › Data protection, or by [sending a request](/help/request). The steps are in [Cancel or change the subscription](/help/membership-and-billing/cancel-or-change-the-subscription); what applies when an agreement is terminated is set out in the [terms of use](/terms).

## Does Conphora comply with the GDPR?

Yes. Conphora ApS is a Danish company and complies with the General Data Protection Regulation (GDPR) and Danish data protection law. The [Privacy Policy](/privacy-policy) describes what is processed, on which legal basis and for how long. How to get a copy of your own data, have it corrected or have it deleted is in [Your data and privacy](/help/getting-started/your-data-and-privacy).

A question about security that is not answered here? [Send a request](/help/request).