LGPD and data residency: what stays in Brazil and what runs in Miami

Which Optidata services keep data in Brazil?

Only Private Cloud. Its Brazilian regions are OPD-BR1, OPD-BR2 and OPD-BR3-IA, and OPD-BR3-IA also runs AI and GPU workloads. Each one hosts general-purpose production and cross-site replicas, so a Private Cloud architecture can keep primary copies, replicas and disaster recovery inside the country.

Where each copy lives is defined with the architect who designs your environment.

Where does the self-serve platform run?

In Miami (US1), Florida, United States. It is the only region of the console: servers, GPU instances, Kubernetes clusters, databases, volumes and buckets created there run in the United States.

If your LGPD assessment requires the data to stay in Brazil, use Private Cloud instead. See every region and what runs in it.

Who is the controller and who is the operator?

For the personal data you store in your servers, databases and buckets, you are the controller and Optidata acts solely as operator (processor), under a data processing agreement.

For the personal data Optidata collects about its own customers and visitors, such as account, billing and website data, Optidata is the controller. The privacy notice explains how that data is handled.

How do I request a DPA?

Ask through the contact page or write to Optidata's data protection officer at [email protected]. Say which product you use, Private Cloud or self-serve.

How do I reach Optidata's data protection officer?

Write to [email protected]. It is also the address to exercise data subject rights (access, correction, deletion and portability) over the personal data Optidata controls.

What about international transfers?

Personal data from Brazil that runs on the self-serve platform or in a US Private Cloud region is processed in the United States. The privacy notice describes how Optidata protects international transfers. Whether that transfer fits your LGPD program is your decision, as controller.

Which security measures protect the data?

Optidata's controls for Security, Availability and Confidentiality are examined in its SOC 2 Type II report, and Optidata holds ISO/IEC 27001 in its own name. The trust center lists the security operations behind both products.