Webflow does not automatically store all data on EU servers by default, nor does it provide a standard, downloadable statement affirming that data belongs to the user or client.
1. Webflow's Data Storage Location
- Webflow primarily uses Amazon Web Services (AWS) and Fastly, with servers located primarily in the United States.
- While Fastly uses a global CDN with edge nodes in the EU, this is for content delivery only (e.g., static assets like images, CSS, and JavaScript files).
- Primary data storage, including CMS content, form submissions, and project data, is hosted on US servers.
2. Data Ownership and GDPR Compliance
- Webflow states in their Terms of Service and Privacy Policy:
- Users retain ownership of their content.
- Webflow is considered the data processor, and the user (site owner) is the data controller.
- Webflow is GDPR compliant and offers a Data Processing Addendum (DPA) upon request.
- The DPA outlines Webflow’s data practices and acknowledges user ownership of data.
- Webflow does not automatically issue a certificate or statement asserting that you or your client owns the data.
- To obtain an official statement, you must:
- Request a signed DPA by contacting Webflow at privacy@webflow.com or through your account representative if you're on an Enterprise plan.
- The DPA will clarify data ownership and Webflow’s role under GDPR, including Standard Contractual Clauses (SCCs) for cross-border data transfers.
Summary
Webflow stores core data on US-based servers and uses a global CDN for asset delivery. While they affirm data ownership in their DPA, a signed statement requires a formal request. For EU-specific data compliance, consult Webflow's DPA and possibly use third-party tools or services for EU-only data residency if required.