Security and Privacy of Customer Hosted Data

Rackspace Technology is committed to helping customers protect the security and privacy of information stored or transferred using Rackspace Technology services. Rackspace Technology services are provided at the direction of the customer, and Rackspace Technology’s obligations for customer hosted data are defined in agreements with the customer.

Security is a shared responsibility

It is important for Rackspace Technology customers to understand and distinguish between security measures that Rackspace Technology implements and operates on the Rackspace Technology supported infrastructure (as set out in the Rackspace Technology Global Security Practices and the Rackspace Technology Data Processing Addendum), and security measures that Rackspace Technology customers need to implement and operate to protect their own data and to comply with specific privacy and security laws and regulations applicable to them.

Rackspace Technology services are provided in a manner that gives customers flexibility over how they configure, secure and deploy their hosted solution based on their unique requirements. Rackspace Technology offers various security solutions, features and services to allow customers to configure and deploy solutions that can help to address their security and compliance challenges. To find out more, visit the Rackspace Technology Security page.

Additional information relevant to specific products and services provided by Rackspace are detailed in the product-specific terms, included in each Rackspace Technology customer agreement.

Privacy and protection of customer hosted data

Rackspace Technology services are provided at the direction of the customer, but Rackspace Technology has no knowledge of the data (including any personal data) that customers store or otherwise process when using Rackspace Technology services. Customers retain full ownership and custody of their hosted data and are in control of the entire lifecycle of their hosted data and how such data is classified, accessed, exchanged or otherwise processed when using Rackspace Technology services.

With this in mind, Rackspace Technology customers remain responsible for any personal information that customers collect and process. Customers must take all reasonable steps to protect the hosted data and to comply with laws and regulations as they may apply to the hosted data and the customer, which includes the customer’s encryption of personal or any regulated data.

Data Center Locations and Data Transfer

See all of our data center locations and additional information

Customers may select the region in which they want to store their data. Customers can store their data in one or multiple regions, and can also replicate and back up their data to other regions different from their primary deployment site (at Rackspace Technology, or a third-party cloud that is supported by Rackspace Technology).

Rackspace Technology and its subcontractors may provide services and support from any state, province, country or other jurisdiction - which may be different than the one where the customer has deployed the services. Unless otherwise instructed by the customer, Rackspace Technology will not relocate the customer’s hosted system to a Rackspace Technology or third-party data center in another region. If you are a Rackspace Technology customer and have a data sovereignty requirement, or require support from a restricted geographic region, please reach out to an account representative.

Rackspace Technology offers a Rackspace Data Processing Addendum in all standard customer agreements that includes EU Standard Contractual Clauses and a UK International Data Transfer Addendum to enable customers to transfer personal data from the EU, Switzerland or the UK to regions which do not have an appropriate adequacy decision. If you are a Rackspace Technology customer and require a Rackspace Technology Data Processing Addendum as an addition to your current agreement, you may obtain one here.