📋 GRC compliance for CMMC 2.0, CPCSC, CPA Canada, IIROC…SaaS discovery for data governanceFree enriched web chat widget🚀 Enriched remote support without your laptop

Data residency

Your data, and the AI that reads it, live in the region your rules require. Canada by default, and the United States, the EU, or elsewhere on request.

Most security vendors can tell you where their database sits. Fewer can tell you where their AI runs, and fewer still will put either where your obligations require. Lavawall® lets you choose the region for both, and runs the AI in that same region rather than sending your data to a model provider in another country.

Choose your region

Canada is the default, hosted on AWS in Montréal and Calgary. When your obligations point elsewhere, we set your tenant up where you need it:

RegionWhere it runs
Canada (default)AWS in Montréal, Québec and Calgary, Alberta, with AI processing in Canada.
United StatesAWS in Oregon, on request. AWS GovCloud and Microsoft GCC are available for public-sector and regulated workloads.
European UnionHosted in Ireland, on request, to meet EU data-residency requirements.
ElsewhereOther locations on request. Tell us the requirement and we will place the tenant to meet it.

Your data and its AI processing run in the region you choose. Identifiers are tokenised before anything reaches a model, and no client data trains any model.

What runs where

Almost everything follows your chosen region. Three things have a fixed default that a supplementary agreement can change.

ComponentLocation
Console, database, backups, logs, Microsoft 365 and Google Workspace monitoring data, reported-phishing submissions, and AI processingYour chosen region: Canada by default, or the US, EU, or another location on request.
Agent compilationCalgary, Alberta, for every jurisdiction.
Domain and network scanningMontréal, Québec by default, for all jurisdictions absent a supplementary agreement. Can be moved to your region by agreement.
Vulnerability scanning (Tenable Nessus)Calgary, Alberta by default, for all jurisdictions absent a supplementary agreement. Can be moved to your region by agreement.

If your obligations require the scanning to run in your own region as well, we arrange that under a supplementary agreement.

Frequently asked

Where is my data stored?
In the region you need. Canada is the default, on AWS in Montréal and Calgary. On request we set a tenant up in the United States (AWS Oregon), the EU (Ireland), or another location. Your data and its AI processing run in the region you choose.
Does the AI run in the same region as my data?
Yes. Ticket triage and incident analysis run in the same region as your data, not shipped off to a model provider in another country. Identifiers are tokenised before anything reaches a model, and no client data is used to train any model.
Is anything always in one place regardless of my region?
One thing: agent software is compiled in Calgary, Alberta for every jurisdiction. By default, and absent a supplementary agreement, domain and network scanning runs from Montréal and vulnerability (Tenable Nessus) scanning runs from Calgary. Both can be moved to your region under a supplementary agreement.