Data residency report
Generated October 4, 2026 by an automated script that asks AWS, region by region, what exists in SealDrop's production account (…7936). It lists counts only — never contents.
Result: 18 regions checked. Services that hold or process data outside ca-central-1: none.
| Service | What it would hold | Found in |
|---|---|---|
| S3 buckets | uploaded files, website files, logs | ca-central-1 (9) |
| DynamoDB tables | request records, audit log, settings | ca-central-1 (8) |
| Lambda functions | processing (the app itself) | ca-central-1 (10) |
| Cognito user pools | staff and operator logins | ca-central-1 (2) |
| KMS customer keys | encryption keys | ca-central-1 (1) |
| API Gateway APIs | the API endpoint | ca-central-1 (1) |
| CloudWatch log groups | application logs (IDs only, no personal information) | ca-central-1 (10) |
| SES sending identities | email sending | ca-central-1 (2) |
| SNS topics | alarm notifications | ca-central-1 (1) |
| SQS queues | message queues | not used |
| AWS Backup vaults | backups | not used |
| GuardDuty malware scanning plans | malware scanning of uploads | ca-central-1 (1) |
| CloudTrail trails (home region) | audit trail of file access | ca-central-1 (1) |
Expected exception
ACM web certificates (CloudFront requires us-east-1); hold domain names only — us-east-1.
Regions checked
ap-northeast-1, ap-northeast-2, ap-northeast-3, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, ca-west-1, eu-central-1, eu-north-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-1, us-east-2, us-west-1, us-west-2
The report is regenerated regularly and after infrastructure changes. Questions: connect@sealdrop.ca. Back to the Trust Center.