GDPR alignment

Union.ai’s architecture inherently supports GDPR through its data residency model. For EU-region data planes, all customer data remains within the European Union. Union.ai operates control plane endpoints in EU West-1 (Ireland), EU West-2 (London), and EU Central (Frankfurt), ensuring organizations can deploy with full EU data residency.

The control plane stores orchestration metadata (including task definitions), encrypted at rest. When both planes are in EU regions (EU West-1, EU West-2, or EU Central), all data and metadata (both at rest and in transit) stay within the EU.

For details on how data residency is enforced architecturally, see Data classification and residency and Two-plane separation.

Verification

GDPR alignment

Reviewer focus: Confirm that all customer data remains within the EU for EU-region deployments and that the control plane does not store data payloads.

How to verify:

  1. Follow the data residency verification steps described in Data classification and residency. All data resides in EU-region infrastructure.

  2. Confirm that the control plane endpoints are deployed in EU regions (EU West-1, EU West-2, EU Central).

  3. This is architectural verification. The two-plane separation ensures data never leaves the customer’s cloud account.