Please note that the below information is copied from the producer's site. This means that the information is provided as-is. We have included links to the original sources as far as possible.
You find all up-to date information regarding data protection and certifications in the NVivo/Citavi: Lumivero Trust and Compliance Center
Where is the data stored for the cloud components of NVivo?
CLOUD STORAGE OF PERSONAL DATA
We may store data on remote servers operated by a cloud service provider, rather than storing it on our own servers. Regardless of the location from which you use our online services or provide information to us, your data may be transferred to and maintained on servers located outside the country in which the data was collected (or, in the case of personal data collected within the EEA, to countries outside the EEA). By providing any data through our online services, you hereby expressly consent to the transferring and processing of your data in such other countries.
Transfers of personal data to servers operated by cloud service providers outside the EEA will be protected by appropriate safeguards, namely the standard data protection clauses adopted by the European Commission or other supervisory authority, which we will incorporate into our agreements with such cloud service providers.
All data is stored with secure methods, and with limited/restricted access to persons duly authorised by Lumivero. Customer data stored in the cloud components of Lumivero products is stored in one of the four regional data centers used by Lumivero. These data centers are located in Canada, Singapore, Netherlands, and the USA. The data center geographically closest to the customer will be chosen as the default location. Enterprise customers may specify the data center they wish to use. Should Enterprise customers decide not to specify a region, the region geographically closest to the Enterprise customer will be selected by default.
The original text source can be found in the Privacy Policy here.
----------------
Transcription - data security & privacy
All media files and transcripts uploaded to or produced by NVivo Transcription are encrypted while in storage and in transit. Data is securely stored at the following locations:
- Europe: for Africa, Europe, and the Middle East
- United States: for the US, and Central and South America
- Canada: for Canada
- Singapore: for Asia, Australasia, and the Pacific Islands
Lumivero accesses files only for the purposes of providing or supporting the transcription service. Otherwise, only users can access their own files.
File deletion
While users have valid Transcription accounts:
- media files are automatically deleted 90 days after they were transcribed or, if the transcripts are edited, 90 days after the last edit (i.e. each time you edit a transcript the count for deletion of its media file resets to 90 days).
- transcripts are kept indefinitely or until the user deletes them.
All users' data is deleted 90 days after they cease to have valid Transcription accounts. A user's account becomes invalid when:
- their subscription expires
- they are unassigned from their subscription by the subscription purchaser or an enterprise administrator
- they are a pay-as-you-go user and have no transcription credits
NVivo Collaboration
NVivo projects stored on NVivo Collaboration Cloud are secured by Microsoft Azure servers in the USA, Canada, Singapore and Europe. This storage infrastructure is fully compliant with GDPR and the strict regulations and conditions set forth in HIPAA (Health Insurance Portability and Accountability Act of 1996).
NVivo Collaboration Server works on an on-premise server in your own data center, offering you centralised storage with additional layers of security and efficiency.