Frequently Asked Questions


Which countries are currently supported?

Currently, InCountry can store regulated data in 80+ countries. InCountry is rapidly expanding and is adding more countries to this list.

  • Americas
  • Argentina
  • Brasil
  • Canada
  • Chile
  • Colombia
  • Ecuador
  • Mexico
  • Panama
  • Peru
  • Uruguay
  • United States
  • Asia Pacific
  • Australia
  • China
  • Hong Kong
  • India
  • Indonesia
  • Japan
  • Korea
  • Malaysia
  • New Zealand
  • Philippines
  • Singapore
  • Taiwan
  • Vietnam
  • Europe
  • Austria
  • Belgium
  • Bulgaria
  • Czech Republic
  • Denmark
  • Estonia
  • Finland
  • France
  • Germany
  • Great Britain
  • Hungary
  • Iceland
  • Ireland
  • Italy
  • Latvia
  • Lithuania
  • Luxembourg
  • Moldova
  • Netherlands
  • Norway
  • Poland
  • Portugal
  • Romania
  • Russia
  • Slovakia
  • Spain
  • Sweden
  • Switzerland
  • Turkey
  • Ukraine
  • Middle East & Africa
  • Egypt
  • Israel
  • Saudi Arabia
  • South Africa
  • United Arab Emirates

Why are countries implementing data residency laws and regulations?

When data is stored within a country’s borders, it is unequivocally covered by that country’s laws and regulations. Citizens of many countries have been complaining about the way their data has been treated and governments are rapidly responding with regulations that manage how their citizens’ data is stored and processed.

What types of data can be stored with InCountry?

Different categories of data are regulated in different countries. Most countries have regulations in place for profile/registration data, health data, financial transaction data, and payment information. InCountry can store textual payloads including JSON data with encoded images.

What is regulated data?

Regulated data refers to data that must be handled in a certain way in order to comply with government laws or industry regulations (e.g. GDPR, Russian Federal Law on Personal Data). A country may have laws, which require certain information collected about its citizens, such as personal information, must be stored locally.

What is de facto data localization?

A country may have a data localization law that, in theory, allows for the storage of regulated data in another country under certain conditions. However, the risk and cost involved is so burdensome that storing the data within the country’s borders is the only practical solution.

Does InCountry provide a generic database solution for storing data?

No, InCountry is not meant to replace your relational database. InCountry is a key value store meant to store only regulated data, that can later be recombined with unregulated data.

What type of encryption is used by InCountry?

InCountry uses SHA-256 for hashes and AES-256 for data payloads.

Does InCountry work with third party key management system?

Yes, InCountry integrates with third party enterprise key management solutions provided by vendors such as IBM and Oracle. InCountry never has access to your keys.

Does InCountry provide encryption keys?

No, each customer maintains their own keys and encrypts data locally using InCountry’s SDK before sending the data to InCountry.

Does InCountry provide insurance to cover incident liability?

Yes, InCountry provides default insurance coverage up to the value of a customer’s spend.

How hard is it to get started with InCountry’s solution?

InCountry was designed to allow customers to get up and running quickly. InCountry’s self-service cloud option greatly reduces the effort and time involved to get up and running. Also, InCountry’s SDK’s are available for a number of popular programming languages and minimize the integration effort.

What infrastructure is used to host InCountry’s solution?

InCountry uses a combination of top tier data centers and leading cloud service providers (Amazon Web Services, Microsoft Azure, Google Cloud Platform, and Alibaba Cloud). InCountry stores your data in two separate points of presence within each country. It’s important to have more than one point of presence in each country in case one goes offline or is shut off due to governmental intervention.