Data Residency and Cross-Border Transfer Policy

1. Scope

This policy describes how MobileSuites stores, processes, and transfers service data across regions for customer-facing products, including edge filtering, telemetry reporting, and support operations.

2. Malaysia-First Launch Model

• Paid self-serve onboarding is initially configured for Malaysia-first rollout.
• Enterprise and public-sector deployments may request country-specific hosting options during onboarding.
• Non-approved countries may be placed on controlled waitlist until legal and operational readiness is completed.

3. Data Categories

• Account and billing metadata
• Security telemetry (event timestamps, route, anonymized or masked source details)
• Operational logs used for troubleshooting and service integrity
• Customer-submitted configuration and support records

4. Residency Options

• Default data-plane region follows the customer deployment profile.
• For regulated customers, country-specific data-plane deployment can be configured subject to infrastructure availability and contract terms.
• Cross-region replication is minimized and restricted to continuity, security, and lawful operations.

5. Cross-Border Transfers

• Cross-border processing may occur for uptime, security operations, fraud prevention, and customer support.
• When cross-border transfer applies, MobileSuites uses contractual, technical, and organizational safeguards appropriate to the data category and jurisdiction.
• Transfers are limited to minimum required data for the stated purpose.

6. Security Controls

• Encrypted transport for service communications
• Role-scoped access controls and environment-scoped secrets
• Telemetry retention controls and operational audit exports
• Incident response and service continuity procedures

7. Compliance and Customer Responsibilities

• MobileSuites provides evidence workflows and export capabilities to support customer compliance programs.
• Customers remain responsible for validating legal and regulatory requirements applicable to their own environment and industry sector.

8. Contact

For residency configuration, enterprise deployment requests, or policy clarifications, contact legal@mobilesuites.app.