Skip to content

Cloud hosting for automation: where your data lives

Where the data behind an automation sits, who holds the keys and what the care plan covers. In the client’s own accounts, in the European Union.

Date
· updated
Reading time
4 min

“Where is my data?” is usually the first real question once a demo is over. For an automation project the answer is a short list, because a bridge between tools touches several systems.


Where each piece sits

  • The records stay in the CRM the client already uses.
  • The workflows run on n8n’s hosted service, whose plans keep data in the EU on servers in Frankfurt (n8n pricing page, checked 17 October 2026), or on a server the client rents, in the region the client chooses. Both are in the client’s name.
  • Project data, such as a KPI database, sits in a database region in the European Union.
  • If an AI assistant works on the client’s systems, its access key and its log of calls stay in the client’s accounts too, so access can be revoked without AINS.

Why the accounts are yours

AINS builds in the client’s own accounts. The client owns the accounts, the code and the data, and workflows export as files that belong to the client.

What the care plan covers

  • Encrypted daily backups
  • Security updates
  • Uptime monitoring with alerts
  • A monthly health report
  • Data export at any time

These sit in the monthly care plan, on every plan.

Personal data in a CRM

A call log is personal data: a number, a name, a time, sometimes a recording link. Lead phone numbers in a CRM, seller performance on a dashboard and recordings synced from a phone system fall under GDPR in the same way. A data processing agreement (DPA) is available on request, so a client’s own auditor gets an answer before asking. Which tool stores what, and where, is worth settling before the flows are built. The comparison of n8n, Make and Zapier shows where each one stores data.

Five questions for any vendor

  1. Where is the data stored, and in which country?
  2. Who holds the keys, and can they be revoked without the vendor?
  3. Can everything be exported, and in what format?
  4. Is a DPA available?
  5. Who is alerted when a flow fails, and who acts?

Calls and recordings are the most sensitive data a CRM bridge moves. How they are synced: Phone to CRM integration →

Go further

Want to see this approach applied to your project? Thirty minutes is all it takes to find out.