Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

Hello! Asking for legal compliance. Where are Ory Cloud services are deployed and the identity data is stored? Is this something configurable?

Hello <@U04D2V0HZH9>

Ory Network (formerly known as Ory Cloud :wink: ) is hosted on Google Cloud, in Frankfurt EU.
In the near future we will add more regions, US is scheduled for Q1/23

What compliance requirements are you looking to cover?

<@U011D3UQKNY> thanks for the fast response. Just wanted to know currently supported regions and the configuration possibilities.

We have services working in India, Singapore and EU. I am currently doing PoCs for various different usecases.

Storing Identity data (email, phone) in Ory could be problematic in some regions and we will have other questions related to private key management, audit logs etc. however those are not my area of focus. Security and legal people from our side would get in touch with you for the details :raised_hands: 

Ok that sounds good :slightly_smiling_face: They can also book a meeting here: <https://meetings-eu1.hubspot.com/tobias-sahl/talk-to-ory>