# Where your data is stored

> Your documents are stored encrypted in the European Union (Amsterdam), with malware scanning before they become available and backups that expire on their own.

- Canonical: https://help.enisa.ai/en/seguridad-y-privacidad/donde-se-guardan-tus-datos
- Updated: 2026-08-08
- Language: en-US
- Versión en español: https://help.enisa.ai/seguridad-y-privacidad/donde-se-guardan-tus-datos.md

The documents you upload to enisa.ai are stored encrypted in DigitalOcean data centres in Amsterdam — inside the European Union and therefore under the GDPR. In two minutes you will know how each document is protected and what happens with backups.

## In the European Union, encrypted

Your documents and data are stored in **DigitalOcean data centres in Amsterdam (Netherlands)** — inside the European Union and therefore under the GDPR. They are stored **encrypted**: both the original files you upload and the content we extract from them to work with.

## Before becoming available: malware scanning

Every file you upload goes through a **malware scan** before it becomes available in your knowledge base. A file that fails the scan is not added — we tell you, so you can check it. This also protects you: nobody on your team will download an infected file from enisa.ai that someone uploaded unknowingly.

## Backups

We keep **encrypted** backups so we can restore the service after a failure. They rotate automatically: no backup lives longer than **30 days**. That is why, when you delete your account, any trace in backups disappears on its own within that maximum window ([how deletion works](/cuenta-y-facturacion/eliminar-la-cuenta)).

## Your rights over this data

- **Export**: you can [request a copy of your data](/seguridad-y-privacidad/exportar-tus-datos) at any time.
- **Delete**: you can delete individual documents from the application, or the whole account with everything it contains.
- **Know who accesses it**: access is limited to your account and to whoever you decide ([who can see your documents](/seguridad-y-privacidad/quien-puede-ver-tus-documentos)).

## Common issues

### Does my data leave the EU?

Storage is in the EU. To generate your analyses and answers we use AI providers, to which we send the content needed for that task — [here we explain exactly how](/seguridad-y-privacidad/entrenais-modelos-con-mis-datos).

### What if I uploaded a file and it doesn't appear?

It may still be scanning, or it may have failed the malware scan. The application shows you its status; if a legitimate file is rejected, write to hola@enisa.ai.

### Does deleting a document really delete it?

Yes: the original file and its indexed content are removed. In backups, the trace expires on its own within a maximum of 30 days.