> ## Knowledge Base Index
> Fetch the complete knowledge base index at: https://help.getzendo.io/sitemap.xml
> Use this file to discover available pages before exploring further.
> Pure-Markdown content can be obtained by appending a '.md' suffix to the content URLs listed in the sitemap (without the trailing slash).

# How Zendo protects your data

Your workspace holds your clients' requests, messages, files, quotes and invoices. This article explains where that data is stored, who can see it inside your workspace and what Zendo does, and does not do, with it.

## Where your data is stored

The Zendo app and everything in your workspace run on Amazon Web Services in Ireland (the **eu-west-1** region), inside the European Union. Your workspace data is not moved outside the EU for hosting.

A few other services help run Zendo, and each one only receives what it needs for its job:

- **Stripe** processes payments.
- **Crisp** runs the support chat and sends Zendo's own emails to you.
- **PostHog** measures how the app is used, in its EU cloud.

The full list, with what each service receives and where it processes it, is on the [GDPR commitment](https://getzendo.io/gdpr-commitment/) page.

## Your data belongs to you

Zendo does not claim ownership of anything you put into your workspace. Your data is never sold, never shared for someone else's profit and never used for anything other than running the service, as the [Terms of Service](https://getzendo.io/terms-of-service/) and the [Privacy Policy](https://getzendo.io/privacy-policy/) set out.

## Who can see what in your workspace

Inside a workspace, roles decide what each team member can see. Agents and watchers only see the requests they are assigned to, and only the owner can manage the plan and billing or connect a custom domain. See [Invite your team and choose roles](https://help.getzendo.io/en/article/invite-your-team-and-choose-roles-10g97kc/).

Clients only see their own requests, orders, files and messages. When clients work together in a team, its members share the team's requests and files, and nothing from other clients. See [Put clients into a team](https://help.getzendo.io/en/article/put-clients-into-a-team-74h5nv/).

## Protect your own account

The most effective thing you can do yourself is turn on two-factor authentication. It is available on every plan, and it stops anyone who only knows your password from signing in. See [Turn on two-factor authentication](https://help.getzendo.io/en/article/turn-on-two-factor-authentication-8mcqlf/).

## Related

- [Zendo and GDPR](https://help.getzendo.io/en/article/zendo-and-gdpr-1oosotl/)
- [Turn on two-factor authentication](https://help.getzendo.io/en/article/turn-on-two-factor-authentication-8mcqlf/)
- [Delete your data](https://help.getzendo.io/en/article/delete-your-data-kpzxyw/)
- [Invite your team and choose roles](https://help.getzendo.io/en/article/invite-your-team-and-choose-roles-10g97kc/)