LOCAL DRAFT — NOT FOR PUBLICATION. This preview is for local review only and has not been cleared for public release.

AU Data Residency Helper

Static preview generated from the local SQLite dataset for local review only. Not approved for publication.

12 vendors loaded

Disclaimer: Indicative only. Not legal, procurement, or compliance advice. Vendor data-residency arrangements change and depend on your contract, region, and configuration. Verify directly with the vendor before relying on this. Information compiled from public sources as at 2026-05-20.

Residency status

  • AU region available: 3
  • AU optional: 4
  • Regional only: 4
  • Unclear: 1

Risk level

  • Low: 5
  • Medium: 4
  • High: 3

What the residency categories mean

Categories are conservative signals, not guarantees. Information compiled from public sources as at 2026-05-20.

AWS

Cloud platform

Low
Residency
AU region available
Hosting
ap-southeast-2 Sydney and ap-southeast-4 Melbourne available
Backups
Customer-controlled backups can remain in selected regions
Support access
Support access depends on account controls and support plan
Signals
ISO 27001; SOC; IRAP

AWS publishes Australian regions and can be configured to keep services and backups inside Australia, but the customer is responsible for region selection; verify against current AWS documentation.

Source: AWS data privacy · as at 2026-05-20

Atlassian Cloud

Collaboration

Low
Residency
AU optional
Hosting
Australia region available for selected products and plans
Backups
Backup handling depends on product and plan
Support access
Support access governed by Atlassian access controls
Signals
SOC 2; ISO 27001; data residency docs

Atlassian offers Australia data residency for supported cloud products but Marketplace apps and some product data may need separate review.

Source: Atlassian data residency · as at 2026-05-20

Microsoft 365

Productivity

Low
Residency
AU region available
Hosting
Australia East and Australia Southeast for eligible services
Backups
Geo-redundant within selected geography
Support access
Global support may access under controlled process
Signals
ISO 27001; SOC 2; IRAP references

Microsoft publishes Australia geography options for core cloud services but buyers still need to confirm workload-specific inclusions.

Source: Microsoft data locations · as at 2026-05-20

Microsoft Azure

Cloud platform

Low
Residency
AU region available
Hosting
Australia East; Australia Southeast; Australia Central for eligible services
Backups
Geo-redundancy is configurable by service
Support access
Support access governed by Microsoft controls and lockbox options
Signals
ISO 27001; SOC; IRAP

Azure can be configured for AU residency when services are pinned to Australian regions and replication settings are reviewed; service-level eligibility and configuration are the customer's responsibility and should be verified against current Azure documentation.

Source: Azure geographies · as at 2026-05-20

ServiceNow

ITSM

Low
Residency
AU optional
Hosting
Australia data centre pair available for eligible instances
Backups
Backup location aligned to contracted region where available
Support access
Support access controlled through support account processes
Signals
ISO 27001; SOC 2; IRAP references

ServiceNow can host eligible instances in an Australian data centre pair when an AU instance is contracted, but instance and subprocessor details should be verified.

Source: ServiceNow Trust · as at 2026-05-20

Google Workspace

Productivity

Medium
Residency
Regional only
Hosting
Data regions can be configured for covered data in selected editions
Backups
Backups may be processed under Google global infrastructure
Support access
Global support access controlled by access transparency features
Signals
ISO 27001; SOC 2; Access Transparency

Google Workspace can support regional storage controls on eligible plans but the public claim is not the same as full AU-only residency.

Source: Google Workspace data regions · as at 2026-05-20

Salesforce

CRM

Medium
Residency
AU optional
Hosting
Hyperforce supports Australia region for eligible services
Backups
Backup and service data depend on product and contract
Support access
Global support access can be restricted with add-on controls
Signals
ISO 27001; SOC reports; IRAP references

Salesforce can host eligible workloads in Australia through Hyperforce, but product coverage and support access settings need procurement review.

Source: Salesforce Hyperforce · as at 2026-05-20

Xero

Finance

Medium
Residency
AU optional
Hosting
Australia and regional cloud infrastructure used for Australian customers
Backups
Backups and subprocessors should be reviewed in trust docs
Support access
Support access may include global teams
Signals
ISO 27001; SOC reports

Xero is an Australian-founded finance platform, but exact data hosting and residency should be validated against the current Xero trust and security pages.

Source: Xero security · as at 2026-05-20

Zoom

Communications

Medium
Residency
Regional only
Hosting
Meeting data routing can be controlled by region with no full AU-only default
Backups
Cloud recordings depend on account settings
Support access
Global support and operations access under policy
Signals
SOC 2; ISO 27001; data routing docs

Zoom offers regional routing controls but not a simple all-data AU residency claim for every service.

Source: Zoom Trust Center · as at 2026-05-20

Canva

Design

High
Residency
Unclear
Hosting
Public trust content does not provide a simple AU-only hosting commitment
Backups
Backup region details require vendor confirmation
Support access
Support access details require vendor confirmation
Signals
SOC 2; ISO 27001

Canva publishes compliance and security signals, but AU data residency is not clearly established from high-level public pages alone and should be confirmed directly with the vendor.

Source: Canva security · as at 2026-05-20

Dropbox

File storage

High
Residency
Regional only
Hosting
Data residency regions focus on US and EU in public business docs
Backups
Backups are managed within Dropbox infrastructure
Support access
Support access controlled by internal policy
Signals
ISO 27001; SOC 2

Dropbox Business buyers needing AU-only storage should request written confirmation because public docs do not present AU residency as standard.

Source: Dropbox Trust · as at 2026-05-20

Slack

Collaboration

High
Residency
Regional only
Hosting
Data residency regions do not list Australia as a primary region in public docs
Backups
Backup and derived data may remain outside selected region
Support access
Global support access under internal controls
Signals
SOC 2; ISO 27001

Slack has data residency features but Australian buyers should treat AU-only residency as unavailable unless the contract states otherwise.

Source: Slack data residency · as at 2026-05-20