Privacy
Privacy at Elastic
At Elastic, we believe that privacy is the foundation of trust in our technology. We are committed to providing you with a secure, compliant, and transparent environment for your data. Built on the rigorous standards of the world's leading regulatory and industry frameworks, our privacy program ensures that you own your data and control how it is processed.
We are committed to privacy-by-design, integrating robust technical and organizational measures to protect your information against unauthorized access while supporting global regulatory compliance. Whether you are leveraging our search-powered AI or monitoring complex environments, our mission is to earn your confidence through transparency and accountability, providing the clear documentation and assurances you need to manage your privacy needs and obligations effectively.
Privacy datasheets
Elastic's privacy datasheets provide a detailed breakdown of how personal data is captured, processed, and stored by and within our Products and Services to help customers assess the impact of our offerings on their privacy posture.
Enabling global compliance
Elastic offers a robust solution for organizations seeking to align with global governance principles, irrespective of their regional obligations. See our white papers below on how you can leverage Elastic’s comprehensive features to advance compliance and unlock significant market advantage.
Data Transfer Impact Assessments
We make it easy to understand how Elastic handles personal data transfers, especially outside the EU/EEA. Below you'll find all data Transfer Impact Assessments conducted by Elastic. We ensure your data stays protected no matter where it goes; it's our commitment to transparency and your privacy.
The location of your data
- Elastic Cloud uses Cloud Service Providers, such as Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP), to provide Elastic Cloud. We support hosting options globally through each of our Cloud Service Providers. You can select the region where you'd like to host your deployments to best meet your data residency needs. Backups are stored in the same region you select for your deployment, by default.
- Elastic uses certain infrastructure and customer support sub-processors to provide services to our customers. The sub-processors relevant to you will ultimately depend on which data center location, services, and functionalities you choose to use. (View lists of our external or internal subprocessors.)
Public authority requests for personal data
We've established Elastic's Principles for Public Authority Requests for Customer Information, which adhere to applicable data protection laws and your customer agreement. Elastic will only disclose or provide access to your data if it's strictly required by law and we'll never disclose your data in a massive, disproportionate, or indiscriminate manner that goes beyond what's necessary in a democratic society.
We've never created a backdoor or master key for any of our products or services and have never allowed any government authority unfettered or direct access to our servers.