The short version
Current sample exports, available source-check results, timestamps, risk flags, and account records: AU/APAC preference. Card data: Stripe. Transactional email: Postmark. Error logs: Sentry AU, redacted before send. Hoist does not currently produce or store PPSR results or certificates.
When an AI agent or MCP host calls Hoist, the result is returned to the caller. Hoist keeps its own source records and logs. What the agent or host does with the result after it receives it is outside Hoist's control.
Per-category breakdown
| Data category | Storage | Region | Encryption |
|---|---|---|---|
| No current PPSR results or certificates | Not currently produced or stored by Hoist | Not applicable | Not applicable |
| Tool-specific verification responses | Returned to caller; operational source and audit records are handled separately. A pack_id does not prove a persisted export. | AU/APAC preference | TLS in transit; operational records encrypted at rest |
| Prelaunch sample Evidence Pack exports | Persisted only when an authorised caller explicitly creates the owner-bound sample export; source checks do not create one automatically | AU/APAC preference | TLS in transit; encrypted at rest |
| Due Diligence Record PDFs | Not currently produced by a source-backed workflow; create_due_diligence_pack returns a non-persisted sample JSON object | Not applicable | Not applicable |
| Search metadata | Hoist operational storage | AU/APAC preference | Encrypted at rest |
| Search logs | Hoist operational storage | AU/APAC preference | Encrypted at rest |
| User accounts | Clerk plus Hoist account storage | AU/APAC preference; identity provider may process outside AU | Encrypted at rest; TLS in transit |
| Payment cards | Stripe | AU + US (Stripe-managed) | PCI-DSS Level 1 |
| Transactional email content | Postmark | US | TLS 1.3; no current PPSR result or certificate data exists to send |
| Application error logs | Sentry | AU | PII scrubbed pre-send |
"Best-effort" residency, honestly
Our default storage posture prefers AU/APAC locations for source records and logs. The internet still has global routing, identity, payment, email, and monitoring providers. That means residency is strong preference by category, not a blanket promise that every byte always stays in Australia.
If you need a contractual AU-only storage commitment, contact us before production. That is an enterprise discussion, not something we should imply on a public page.
Sovereignty
Cloudflare and Stripe are US-headquartered; the US CLOUD Act could in theory compel them to disclose AU-resident data to US authorities. We've never received such a request. If we do, we'll publish a warrant canary in /changelog.