Webflow sync, pageviews & more.
NEW

Does Webflow store a copy of all data in an account onto an EU server and provide a statement confirming that the data belongs to the user or client?

TL;DR
  • Webflow stores core data on US servers, with EU-based edge nodes used only for content delivery.
  • Users own their data, and to obtain a formal statement or DPA affirming data ownership and GDPR compliance, a request must be made to Webflow.

Webflow does not automatically store all data on EU servers by default, nor does it provide a standard, downloadable statement affirming that data belongs to the user or client.

1. Webflow's Data Storage Location

  • Webflow primarily uses Amazon Web Services (AWS) and Fastly, with servers located primarily in the United States.
  • While Fastly uses a global CDN with edge nodes in the EU, this is for content delivery only (e.g., static assets like images, CSS, and JavaScript files).
  • Primary data storage, including CMS content, form submissions, and project data, is hosted on US servers.

2. Data Ownership and GDPR Compliance

  • Webflow states in their Terms of Service and Privacy Policy:
  • Users retain ownership of their content.
  • Webflow is considered the data processor, and the user (site owner) is the data controller.
  • Webflow is GDPR compliant and offers a Data Processing Addendum (DPA) upon request.
  • The DPA outlines Webflow’s data practices and acknowledges user ownership of data.

3. Getting a Formal Statement

  • Webflow does not automatically issue a certificate or statement asserting that you or your client owns the data.
  • To obtain an official statement, you must:
  • Request a signed DPA by contacting Webflow at privacy@webflow.com or through your account representative if you're on an Enterprise plan.
  • The DPA will clarify data ownership and Webflow’s role under GDPR, including Standard Contractual Clauses (SCCs) for cross-border data transfers.

Summary

Webflow stores core data on US-based servers and uses a global CDN for asset delivery. While they affirm data ownership in their DPA, a signed statement requires a formal request. For EU-specific data compliance, consult Webflow's DPA and possibly use third-party tools or services for EU-only data residency if required.

Rate this answer

Other Webflow Questions