We recently had a CISO consultant join our team an...
# general
k
We recently had a CISO consultant join our team and he noted it down as an issue that the UK data wasn’t being stored in an UK based server and EU data in an EU based server with alternate sign in options for each. All data from our global subsidiaries are stored in a data center located in the US, with a single sign-in option for all subsidiaries (as is the default NetSuite environment option). The CISO consultant has expressed concern about this arrangement, as it entails storing EU and UK data in a US data center. He's referenced the Trans-Atlantic Data Privacy Framework which went into effect on the 13th of December of 2022. Does anyone here have experience with an alternate setup where data is not shared, multiple books for each subsidiary, separate data storage for each subsidiary etc.?
s
I believe the only alternative is a separate netsuite license per entity (i.e. a separate system) with the license based in the required country/region. The oneworld setup stores everything in one database instance and I don't believe it could be split out given that there is an overarching framework of functionality that is subsidiary neutral.
s
I can confirm that, that is why Oracle is expanding their data centers across the globe to fulfill data residency requirements. Further more the way the whole Netsuite eco system is structured it is quite impossible to segregate the data due to multi tenant model. They do have dedicated hosting options you can look into that - it is costly.
k
Thank you for the feedback on this, much appreciated. Yeah, this sounds expensive all around and to have to manage and maintain 3 environments at the minimum etc.
r
Its interesting that by default, NetSuite (at least in the past) assigned data centers to an account based on the billing address of the customer with little consideration as to where primary users are based. So despite being based in the UK, if the contract was signed with a US address on the agreement, that's why you ended up in a US data center by default. You can request a move but its super costly.