Authy uses data centers located in the United States to store data, but we may use backups in other regions too.

This data storage scheme is compliant with all GDPR requirements. For more information, please see GDPR And EU Data Location Requirements (Twilio Blog).