New: the AI firewall watches every module and explains each incident in plain words. See how it works

Regions and data residency

Hermetry runs in the EU, the US and Türkiye. Learn what stays in your region and how to check it.

Hermetry runs as separate deployments in three regions:

Region
European UnionEU
United StatesUS
TürkiyeTR

Your home region

Every organisation has one home region. It is set when the organisation is created. Your organisation’s data lives on the platform in that region:

  • devices, profiles and credentials,
  • telemetry, attributes and alarms,
  • dashboards, drawings, designs, rules and flows,
  • members’ work, settings and the audit log.

The global directory that routes requests knows only which region and node an organisation lives on. It holds no name, address, owner or setting of the organisation.

An organisation can also carry a residency requirement: the region, or the legal area, its data must stay in.

Check your residency facts

Owners and administrators can open Residency in the organisation settings (address /admin/settings/residency). It shows:

ItemMeaning
Home regionThe region the organisation lives in.
Residency requirementWhere its data must stay, if set.
Region factsThe region’s residency class, legal area, jurisdiction and legal frameworks.
Sub-processorsThe active sub-processors of the region.
Backup locationThe class of place where backups are kept. Shown as not attested until it is reported.
Emergency accessEmergency (“break-glass”) access grants of the last 365 days for your organisation and its node.

The region facts are signed by the platform’s control plane, so the page cannot show facts that were not issued for your node.

Emergency access

In an emergency, Hermetry operators can be given time-limited access to a node. Such a grant needs two signatures. Every action during it is marked in the audit log of the organisation it touches, and the grant is listed on the residency page.

Devices and regions

Devices connect to the device host of your organisation’s region. Use the host shown on the device’s Connection details card.