XGRC® Software · Trust Centre

Data Hosting

Version: 2.0 · Last updated: 13 April 2026

This page provides information on where Customer Data is hosted and processed in connection with the XGRC® platform.

1. Primary Hosting Location

Customer Data is hosted on Microsoft Azure, in the West Europe (Netherlands) region. Azure’s infrastructure holds its own ISO 27001, ISO 27017, ISO 27018 and SOC 2 Type II certifications.

2. Subprocessor Locations

Customer Data may also be processed by Strategix’s subprocessors in the jurisdictions listed on the Subprocessor List. These subprocessors provide critical services such as email delivery, logging, and security monitoring.

3. Cross-Border Transfers

Where Personal Information is transferred outside South Africa, Strategix ensures that appropriate safeguards are in place in accordance with the Data Processing Addendum and applicable data protection legislation. This includes ensuring that recipients are subject to laws or agreements that provide an adequate level of protection.

Need a security questionnaire completed, or a signed copy for procurement?

Contact us