!
English translation (reference).This is a translation of the Japanese data processing page. In the event of any discrepancy, the Japanese version is authoritative.
i
Region information is published based on the actual configuration (last updated: 2026-08-30).It is updated as contracts and configurations change. “Asia Pacific (APAC)” for D1 and R2 means storage in Cloudflare data centers within the Asia Pacific region (a regional designation not limited to a single country).
| Data | Stored / processed at | Current handling |
|---|---|---|
| Account and organization information | Cloudflare D1 / Workers | D1 Primary: within the Asia Pacific (APAC) region. Not limited to a specific country. |
| Authentication information | AWS Cognito | Japan User Pool: ap-northeast-1 (Tokyo). |
| Files themselves | User’s AWS S3 / Cloudflare R2 | The user selects the upload destination region. Encrypted data is stored directly from the browser. |
| Files themselves | DioTrans-provided storage (Cloudflare R2) | Stored within the Asia Pacific (APAC) region. Only encrypted data is stored. |
| Transfer metadata | Cloudflare D1 | Subject, message, file names, sizes, recipients, expiry, etc. After the transfer expires, the files are deleted and the metadata remains for auditing. |
| Audit logs (transfer logs, download access logs, abuse reports) | Cloudflare D1 | Retained during the contract period and viewable by administrators. On account deletion, personal information (email, IP, User-Agent) is anonymized. After the contract ends, data is anonymized and deleted within 2 years. |
| Log-in history | Cloudflare D1 | Recorded for log-in notifications. Deleted when the account is deleted. |
| Notification and verification email | AWS SES or user SMTP | SES region: ap-northeast-1 (Tokyo). |
| Payment information | Stripe | Card numbers are processed by Stripe and not retained by us. Email address, name, billing address, and tax ID are sent to Stripe, and customer and subscription IDs are stored in D1. |
| Application execution logs | Cloudflare Workers Observability | Request URLs and statuses, etc. (request bodies are not included). Retained for up to 7 days for troubleshooting. |
| Database backups | Cloudflare D1 Time Travel | Restoration to any point in the last 30 days is possible. Recovery points are managed by Cloudflare. |
| IP, User-Agent, consent records | Cloudflare D1 | Stored as security audit and consent evidence. Anonymized when the account is deleted. |
Services configured by users
Organization identity infrastructure
If external OIDC is configured, authentication processing also follows the policies and regions of the configured IdP.
Organization mail infrastructure
If organization SMTP is used, notification email processing moves to that provider.
Organization upload destination
If the user’s storage is selected, the bucket region, retention, and backups are managed by the user.