Personal data location and homing
Ory Network is globally distributed for maximum resilience and minimum latency. Check out the blog post for details on how this works.
As discussed in that blog post, replicating personal data (also known as personally identifiable data or PII) across the globe is prohibited or made difficult by legislation like GDPR and would impede your user's control over their data.
Ory Network solves this by separating personal data from operational data. Personal data is any data concerning your users and identities managed by Ory: think email addresses, names, phone numbers, device and location data, emails, etc. Operational data is everything else: think "is this session or access token valid?" or "does the user with this anonymized ID have permission to access file X?"
Ory Network globally replicates and makes available all operational data, giving you access with low latency based on the geographical location of where the request originates.
Personal data in Ory Network is always saved in a particular region and stored only there. For users from the EU, their personal data is stored on servers physically located in the EU. For users from the US, their personal data is stored in the US.
Ory Network handles this distinction for you transparently. You don't have to do anything to opt-in. Whatever data you query from wherever you are located, Ory Network will combine any globally replicated operational data with regional personal data for you automatically, reaching out behind the scenes to the region where that personal data is stored.
Selecting a storage location for personal data
When you create a new Ory Network project in the Ory Console, you are given a choice of
personal data storage location for your new project. Any personal data of your users and identities will be stored just in that
region, and replicated within that region for availability and durability. This choice sets the project's home_region and is
permanent for that project. Within that boundary, you can
choose or change each identity's region through the admin identity API.
Your project's chosen personal data storage location is shown in the Ory Console.
Global and US Continental storage locations
For enterprise customers, Ory offers the "Global" and "US Continental" personal data storage locations. This means personal data is stored in the geographically closest location of the user's first signup. For the "Global" option, this spans any of Ory Networks storage locations across the globe. "US Continental" means the user's personal data is stored in the geographically closest storage location inside the contiguous United States.
You can override automatic placement when creating or provisioning identities, and move existing identities within the project's allowed regions. See Choose an identity's data region for practical API examples and migration completion guarantees.
Regions and availability zones
When an identity's personal data is stored in a region, say US west, it is still highly available and replicated across at least three availability zones within that region. Standard backup and disaster recovery plans are in place and regularly tested as well. See https://trust.ory.com/ for details.