As you might know, EU has a new regulation which requires to every sensitive user data to be stored physically in EU. This means, that Anvil’s DB - which I assume located in UK - would be outside of EU, so won’t fit into EU regulations anymore if I’m using it’s built in DB features, like user registration or basically any data with sensitive information (phone, address, email, company records…)
Is there any solution by Anvil other then use my own DB on my own server via uplink?
I think they use AWS, so wherever that instance is running is probably considered “the physical location” of the data.
I do not know if they use multiple instances, or if they are running it in an AWS instance in the UK, or in the EU.
Off topic I guess, but Just wondering,… what if you have users in multiple places that all have “regulations” like this? Are you supposed to have multiple different physically separated databases of sensitive information that then have to constantly share it between places, making it harder to secure?
This sounds not very well thought out from a technology regulation and implementation standpoint.
(Yes I know many aren’t well thought out.)
I guess like most regulations the answer is be quiet and just do it or we will hit you with a stick.
off topic answers: that is exactly the problem… i.e. Facebook should separate all users to EU located servers to store European’s data… which is extreme and they talking to leave EU if they really push this new regulation.
It is just another decision made by politicians knowns nothing about how the world works… but they are good to screwing around (obviously wont change anything in terms of security)