HELP FILE

Where is my LastPass Enterprise Vault Data stored?

LastPass Enterprise account holders can learn about what types of data are stored, storage locations, data protection methods, how to request moving your data to another location, migration process, storage for linked personal LastPass accounts, and where to learn more.

What types of data does LastPass store?

There are two types of data LastPass stores:

  • Vault Data (i.e., Customer Content) – This is the data that you create and/or enter to store in your LastPass Vault, including usernames and passwords for sites, secure notes, form fill items – data that is personal and specific only to you.
  • Account Data – This is the data we maintain in order to ensure we are able to provide LastPass Service worldwide to our users, including authenticating LastPass accounts and maintaining account, feature, configuration, language, profile, policy, and group settings.

Where are these data types stored?

LastPass has data centers located in the United States (US), Europe (EU), and Australia (AU). By default, when a new LastPass account is created, Vault Data is stored in the United States, and Account Data shall be stored and replicated worldwide in our data centers in order to ensure you have access to the LastPass Service from anywhere with an Internet connection.

LastPass Enterprise account holders can request that their Vault Data be stored in a LastPass data center located in either Europe or Australia instead of the United States. Alternatively, if your LastPass Enterprise account's Vault Data is already being stored in Europe or Australia, you can make the request to change the storage location back to a LastPass data center in the United States.

Please be aware that Vault Data can only be stored in one location at a time.

How does LastPass protect my data?

As with all LastPass data, the above information is securely synced to LastPass servers. We use firewalls, secure transfer protocols, and industry-standard practices to protect the servers and service, as well as regular third-party audits for outside review and validation of our security and privacy measures. Any other personally identifiable Vault Data (e.g., usernames, passwords, information in notes, name of entries, values for form fields) is encrypted using our local-only encryption model, in which LastPass never knows your Master Password and never has access to personal information stored in your Vault.

How can I request to move my Vault Data?

You can contact your assigned LastPass Customer Success Manager or account manager to request to change the location of where your Vault Data is stored (i.e., Europe, Australia, United States) – you do not have to be a resident in that location to make this request.

What is the process of migrating my data?

LastPass has data centers located in the United States (US), Europe (EU), and Australia (AU). To provide a clear understanding of how LastPass data is handled if a Vault Data migration is requested, please see the tables below.

Migrating Vault Data from United States to Europe

Data Type Original Location New Location after Migration
Vault US EU
Account US & EU US & EU

Migrating Vault Data from United States to Australia

Data Type Original Location New Location after Migration
Vault US AU
Account US & EU US & EU

Migrating Vault Data from Europe to Australia

Data Type Original Location Migration Path New Location after Migration
Vault EU EU to US to AU AU
Account US & EU US & EU US & EU

Migrating Vault Data from Australia to Europe

Data Type Original Location Migration Path New Location after Migration
Vault AU AU to US to EU EU
Account US & EU US & EU US & EU

If I have linked my personal account, where is my data stored?

By default, when a new LastPass account is created (regardless of your account type), Vault Data is stored in the United States, and Account Data is stored in both the United States and Europe. If you have a linked personal LastPass account, your Vault Data will remain stored in the respective location and cannot be moved – even if your LastPass Enterprise Vault Data is being stored in Europe or Australia.

Your LastPass personal account is completely separate from your LastPass Enterprise account. This means that if you choose to migrate your LastPass Enterprise Vault Data to Europe or Australia, the Vault Data from your LastPass personal account will remain completely unaffected.

Where can I find more information?

Please visit our LogMeIn Trust & Privacy Center and view the LastPass Security and Privacy Operational Controls compliance documentation for more information.

Related

Where is my LastPass Vault data stored locally on my computer?

What other data does LastPass handle?

How do I export my LastPass Vault data?