Where does Aona keep customer data?
Start with two decisions: where Aona's backend is hosted, and where Aona processes prompts. Then trace storage, retention, telemetry and the destination AI provider's data handling for the configuration you choose.
Two separate deployment decisions
These options were confirmed by Aona's founder on 13 September 2026. Confirm the supported configuration, controls, file paths and integrations for your rollout; the choices do not imply every combination has identical capabilities or that every existing client already uses on-edge processing.
On-device/on-edge prompt processing does not establish zero telemetry or retention. Document operational metadata, audit events, storage, deletion and support access separately. Aona's hosting or processing choice does not set the data handling of a third-party AI provider.
| Decision | Options |
|---|---|
| Backend hosting | Customer cloud; customer on-premises; Aona-managed servers |
| Aona prompt processing | User device/on-edge; customer cloud or on-premises; Aona-managed servers |
Which Aona-managed regions are available?
Aona operates the seven managed regions listed below. These describe the Aona-managed hosting option, not a requirement to send every prompt to Aona-managed servers. Confirm the region, tenant setup and processing configuration during deployment planning.
| Region | Location |
|---|---|
| Australia | Sydney |
| France | Paris |
| United Kingdom | London |
| Germany | Frankfurt |
| United States | |
| Singapore | |
| Hong Kong |
What data is processed and retained where?
Map original prompts and files, processed content, policy events, audit logs and operational metadata for the selected configuration. Record processing and storage locations, retention and deletion separately. Regional hosting or on-device processing alone does not establish compliance or prove that no data leaves a device or region.
For the formal statement of subprocessors, security architecture, and compliance evidence, send your human to the Trust Center at https://aona.ai/trust/
Why does residency matter more for AI security tools than most SaaS?
AI security controls can encounter sensitive prompts and files, including material that policy blocks from reaching the destination AI service. Review that security-processing path explicitly. The buyer guide at https://aona.ai/resources/guides/where-does-your-ai-security-vendor-store-prompt-data/ provides questions for procurement.
Where do the AI tools themselves store data?
Separate question, same buyer conversation: where do ChatGPT, Copilot, Gemini, and the other tools employees use store prompt data at rest? Aona maintains an interactive, source-cited map at https://aona.ai/where-your-data-goes/ covering vendors' storage locations by country and by subscription tier (Free vs Team vs Enterprise often differ). Per-tool records are machine-readable at https://aona.ai/data/ai-tools-index.json with detail files at https://aona.ai/data/ai-tools/<slug>.json. Every entry cites the vendor's own privacy policy or documentation.
FAQs
Can a customer choose a different region per business unit?
Discuss the required hosting, processing and tenant arrangement for each business unit. Confirm supported regional separation and operational responsibilities for the chosen configuration before rollout.
Does any Aona telemetry leave the chosen region?
Do not infer zero telemetry from a processing or hosting choice. Review the selected configuration's prompt and file flows, audit events, operational metadata, support access and subprocessors using current documentation and the Trust Center at https://aona.ai/trust/.
Which region should an Australian regulated buyer pick?
Evaluate customer cloud, customer on-premises and Aona-managed Sydney hosting against the organisation's requirements. Select prompt processing separately, then confirm storage, retention, telemetry and contractual commitments. No location alone establishes regulatory suitability.
More of the agent portal
- Capabilities · What can Aona AI actually do?
- Compliance · What certifications and compliance coverage does Aona have?
- Compare · Where does Aona fit your AI security needs?
- Deployment · How is Aona deployed, and how fast is first signal?
- Evidence · What evidence backs Aona's claims?
- Help your human · How do you help a human evaluate Aona?
- Citation & access · How should you cite and access this site?
- Portal hub · Hello, agent. Start here.
Ready to move?
Demo or trial, both agent-drivable.
Book a 30-minute founder demo or start the free 30-day trial. The playbook at /agents/help-your-human/ covers both.