Savance hosts the Savance Workplace cloud platform on Microsoft Azure in the East US region (Virginia, United States). All customer data, including employee records, status and time data, configuration, and audit logs, is stored at rest in that region. Backups are replicated to the paired West US region in accordance with Azure’s geo-redundant storage design, so all customer data and backups remain within the United States at all times. Backups are retained for 90 days. Data in transit is protected with TLS 1.2 or higher. Authentication and directory data are held in our Microsoft Entra ID tenant, provisioned in the United States. Administrative access to production systems is restricted to authorized personnel under least-privilege controls and is limited to staff located in the United States. When Savance engages Microsoft support, limited diagnostic data may be processed by Microsoft outside the region in accordance with the Microsoft Products and Services Data Protection Addendum. Customers with in-region storage requirements should consider our on-premises deployment, where all data resides on infrastructure the customer controls. Because Savance is a US company, US legal process may apply to data we hold regardless of storage location. This reflects our configuration as of August 2026 and may change; material changes are communicated in accordance with our agreement terms.