Data Residency & International Data Transfers

Data Storage Location

LiteAPI primarily processes and stores data in United States–based data centers operated by trusted cloud infrastructure providers.

These data centers are selected to ensure:

• High availability and resilience
• Strong physical and logical security controls
• Compliance with internationally recognized security standards

LiteAPI does not guarantee data storage in a specific geographic location unless explicitly agreed in writing.

International Data Transfers

As data is stored and processed in the United States, personal data originating from the European Union or other jurisdictions may be subject to international data transfers.

LiteAPI acknowledges its obligations under applicable data protection regulations when transferring personal data across borders.

Transfer Safeguards

Where required by law, LiteAPI relies on appropriate safeguards to legitimize international data transfers, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Contractual data protection commitments with sub-processors
• Technical and organizational security measures to protect transferred data

These safeguards are designed to ensure an adequate level of protection for personal data transferred outside the European Economic Area.

Sub-Processor Locations

LiteAPI may engage sub-processors located in the United States or other jurisdictions to support infrastructure, monitoring, and operational services.

All sub-processors are:

• Carefully selected and assessed
• Bound by contractual data protection and confidentiality obligations
• Required to implement security measures consistent with LiteAPI’s obligations

A list of sub-processors and their locations can be provided upon request.

Customer Considerations

Customers are responsible for:

• Assessing their own data residency and transfer requirements
• Determining whether international data transfers align with their regulatory obligations
• Implementing appropriate disclosures and legal bases for cross-border data transfers