Europe (Frankfurt & Dublin)
eu-central-1 / eu-west-1
Data remains within the European Union for strict residency and transfer compliance.
Local Storage by Design
When you set up your organization in BlackShield, you pick the AWS region where you want your data stored. Your finding inventories, code vulnerability records, and audit logs are written to a dedicated database partition hosted inside that geographic boundary. We do not replicate or move your security findings across international borders.
How Scanners Route to Your Regional Endpoint
Every API key issued for your workspace includes a regional prefix (for example, bks_euc1_... for Frankfurt). All official BlackShield scanner clients (Pipeline, Cloud, Kubernetes, VM/Host, Network Sensor, and Security Agent) and the BlackShield SDK inspect this prefix and automatically direct traffic to:
https://<region>.api.blackshield.chaplau.com
Because the routing is automatic, your CI/CD pipelines and Kubernetes pods send data straight to the nearest local endpoint without needing manual URL configuration or custom proxies.
North America (Virginia, Ohio & Oregon)
us-east-1 / us-east-2 / us-west-2
High-throughput endpoints located next to major US cloud regions.
Canada (Central)
ca-central-1
Guaranteed domestic storage on Canadian soil.
Asia Pacific (Sydney & Tokyo)
ap-southeast-2 / ap-northeast-1
Sub-20ms RTT for Asia-Pacific pipelines with zero cross-ocean data egress.
No Regional Surcharges
Many enterprise security vendors charge a premium or require higher pricing tiers for European or Asia-Pacific hosting. BlackShield uses an on-demand serverless architecture that scales to zero when idle. Because we do not have to keep idle servers running in secondary regions, we provide full data residency in all 17 default AWS commercial regions at no extra cost.