A vendor can store records in Australia and still process audio or text offshore, and both can matter under APP 8. This is general information, not legal advice. Below is what each vendor publishes about processing region, with the quote and source for each entry.
“your personal information will be processed within the US and countries where our service providers are located”www.abridge.com
Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.
“All AI software and data remain within Australian cloud infrastructure”aidial.com.au
Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.
“agent assist uses cross-region inference to automatically select the optimal AWS Region for processing your data … If you do not want your data processed in a different Region from what you selected, you can contact AWS Support.”docs.aws.amazon.com
Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.
“information collected through the Sites may be transferred to, processed, stored, and used in the U.S. and other jurisdictions”www.ambiencehealthcare.com
Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.
“transferred to our servers in the US, or to other countries outside the European Economic Area (“EEA”) and the UK for the purposes outlined in Section 2”www.anthropic.com
Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.
“To leverage high-performance GPU clusters required for Large Language Models (LLMs) and Advanced Speech Recognition (ASR), data may be processed outside Singapore.”help.webex.com
Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.
“Cloud infrastructure provider used for AI processing activities within the EU only and it will not be used for hosting or storing customer data.”www.corti.ai
“we may transfer the data, including Personal Data, to Denmark and process it there”corti.ai
Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.
“those third parties may store, transfer, or access personal information outside of the United States (for example, in Australia or other countries).”www.coviu.com
Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.
“We collect information globally and may transfer, process and store your information outside of your country of residence, to wherever we or our third-party service providers operate”curiousthing.io
Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.
“We are headquartered in the United States and may use service providers that operate in other countries. Your personal information may be transferred to the United States or other locations”decagon.ai
Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.
“Agents connect to the closest Voice Edge, keeping call paths short and completely localized.”www.five9.com
“transferred outside of the country or region in which you reside, including to the United States (where Five9 is headquartered) and other countries where our data centers …”www.five9.com
Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.
“Any transient recording file processing, for example, encryption and decryption of the recording for playback, and export the recording, all happen in your home region.”help.genesys.cloud
“Amazon Web Services, Inc. In region (data center region selected by customer)”help.genesys.cloud
Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.
“When you use jurisdictional endpoints, ML processing stays within that specific geographical region (such as the United States or the European Union).”docs.cloud.google.com
Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.
“Healthengine may disclose limited personal information to third party service providers located outside of Australia in connection with the operation and functionality of its AI Virtual Receptionist and AI assisted electronic communications products.”healthengine.com.au
Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.
“All personal information entrusted to HotDoc is securely stored and processed within Australia”practices.hotdoc.com.au
Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.
“is stored and processed exclusively within Australia; all AI inference occurs in Australia”www.i-scribe.com.au
Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.
“When you use Lyngo, some of your data may be processed by these providers on our behalf.”help.lyngo.ai
Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.
“All patient data is processed and stored within Australia, aligned with Australian Privacy Principles and local healthcare expectations.”www.lyrebirdhealth.com
“We perform all transcription in real time, on servers located in your region, so audio is turned into text during the consult and is never permanently stored.”help.lyrebirdhealth.com
“Specifically, your information may be transferred overseas to: United States: Stripe for payment processing … Speech processing … remains stored in Australia (AWS Asia-Pacific Sydney region) and is not transferred overseas.”www.lyrebirdhealth.com
Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.
“Third-party suppliers of automated transcription services may be provided from the USA”medowhealth.ai
Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.
“The data is stored or processed only in the region where the resource is created. For example, if you create a Foundry resource for speech in the westus region, the data is only in the westus region.”learn.microsoft.com
“For any deployment type labeled 'Global,' prompts and responses may be processed in any geography where the relevant model sold by Azure is deployed”learn.microsoft.com
“Global training provides more affordable training per token, but doesn't offer data residency. It's currently available to Foundry resources in the following regions: Australia East”learn.microsoft.com
Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.
“Dragon Copilot is an “EU Data Boundary Service” and stores and processes Customer Data within the EU Data Boundary”learn.microsoft.com
“In the US, data is replicated between two data centers to keep data current. However, data never leaves a geography.”learn.microsoft.com
Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.
“We prioritize selecting providers within the European Union that strictly adhere to the GDPR. However, in exceptional cases, we may opt for non-EU providers”legal.mistral.ai
Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.
“Google Cloud Infrastructure Hosting Central Region (USA) Belgium (All Non-USA) Azure Speech to Text Operations (U.S. Regions)”trust.nabla.com
Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.
“If you select a region that supports regional processing, as specifically identified below, the services will perform inference for your Customer Content in the selected region as well.”developers.openai.com
Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.
“All personal information processed by us may be transferred, processed, and stored anywhere in the world, including, but not limited to, the United States”sierra.ai
Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.
“Enterprise agreement with a zero-data-retention policy; data is not retained by, or used to train the models of, the provider; accessed via the provider's EU endpoint”tortus.ai
Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.
“your information may be transferred to, stored, and processed in the United States where our servers may be located.”voicestack.com
Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.
We could not find this on the vendor's public pages as at the check date. This is not a statement that the vendor lacks the capability or has not disclosed it elsewhere.
Are we missing something, or has this changed? Vendors and their representatives can submit a correction, and we note each change and credit the source. We review every correction request and update the entry when the source supports it.
Submit a correction