Field reportSH-2026-0162
Data residency claims are rarely checked
The contract says one region. The support tooling frequently says otherwise.
SeverityHigh
7 minB2B Compliance & DLP
Primary storage generally honours the stated region. Logs, backups, telemetry and support access tooling often do not, and they are the components least likely to appear in a due diligence questionnaire.
Asking a vendor to enumerate every system that touches customer data, including support paths, surfaces the gap quickly. Few buyers ask.