Skip to content
Strategy Agent Docs

Data residency

In the EU

Section titled “In the EU”

The Strategy Agent runs on Amazon Web Services in the AWS region Frankfurt (eu-central-1). Your content and your sign-in data are stored and processed only in AWS regions in the EU:

  • Conversations, files and everything else your users create stay in these regions.
  • Users sign in through Amazon Cognito in Frankfurt.
  • Emails from the Strategy Agent, such as invitations, are sent through Amazon Simple Email Service in Frankfurt.
  • AI models answer through Amazon Bedrock, only in AWS regions in the EU.
  • Web search runs on Amazon’s own web index in the AWS region Ireland (eu-west-1). What the agent searches for stays within AWS and isn’t sent to another search engine.
  • The AgentCore Browser, in which the agent opens web pages that need a browser, runs in Frankfurt.

Outside the EU

Section titled “Outside the EU”
  • Delivering the web application. Amazon CloudFront delivers the web application’s files from servers worldwide. These servers process the IP address of the device that requests the files, but none of your content.
  • Configuration of global AWS services. Settings such as access roles and DNS entries are held in the USA. They contain no content.
  • Microsoft Teams. If your company uses the Strategy Agent in Microsoft Teams, messages pass through Microsoft’s Azure Bot Service in the region West Europe. Microsoft first receives Teams requests at global endpoints before routing them there.

Section 3.13 of the privacy policy describes this processing, and Annex 4 of the data processing agreement lists the server location of every sub-processor, for all products of Scavenger AI.

Web pages the agent reads

Section titled “Web pages the agent reads”

When a user has the agent read a web page, or open one in the AgentCore Browser, the agent requests the page from the server of that website, wherever it is, as any browser does. The request carries the page’s address and what a browser sends with it, but no other content and nothing that identifies the user. See Let the agent use the web.