Last reviewed: May 2026
Data Hosting & UK Data Residency
This page explains where your data lives — where GPWidget is hosted, where AI processing happens, and where backups are stored. It is the public summary of our internal hosting and infrastructure controls.
In short
1. Everything stays in the UK
The platform is designed so that primary organisational and personal data is processed and stored within the UK at all times:
- Application & storage — hosted in the AWS UK (eu-west-2, London) region.
- AI processing — performed within the AWS-managed AI service operating in the UK region; prompts are processed transiently and are not retained by the underlying provider afterwards.
- Backups — created and stored within the same UK region.
- Organisational content — never used to train foundation AI models.
2. Infrastructure security
The hosting environment incorporates standard cloud security controls:
- Network isolation and logical separation between components and customers.
- Separation of environments — development is kept separate from production.
- Secure configuration management across the infrastructure.
- Least-privilege, MFA-protected access to production systems, with all access audit-logged.
3. No routine offshore access
Build IT Medical Ltd does not operate routine offshore support or engineering access to customer environments or organisational content. Where limited supplier processing outside the UK may occur in support of operational services, it is covered by appropriate safeguards — see Subprocessors & International Transfers.
The bottom line