Data regionalization
Data regionalization in Citrix Secure Private Access enables customers to control where their data is stored by selecting a preferred geographic region. Customers can choose the region where their data is stored, with options including Global, Europe (EU), APAC (Asia Pacific), and North America (NA). All configuration data at rest remains within the selected region, ensuring that it does not leave the designated geography.
For any user access request, application traffic is processed within the selected region and does not traverse or leave that geographic region. This applies regardless of the user’s location. Even if users are distributed globally, each user’s traffic is routed through the selected region and does not traverse any other geography.
The data regionalization feature delivers the following benefits:
- Ensures strong data residency control by keeping all configuration data within the selected region.
- Ensures strong data residency control by keeping configuration data and applicable management and supporting service data within the selected region, with regional data PoPs and management endpoints used for customer deployments.
- Ensures that user access request traffic for any application remains within the selected region by leveraging geo-location-based routing, which directs user traffic to specific PoPs regardless of the user’s location.
- Helps organizations meet regulatory and data sovereignty requirements.
- Reduces risk by preventing data from leaving designated geographies.
- Supports flexible global deployments with region-specific needs, enabling customers to confidently adopt cloud-delivered secure access aligned with their residency policies.
Note:
Without data regionalization, organizations operating across regions might face strict data residency and compliance requirements while lacking control over where their service data is stored. Without regional data boundaries, configuration data might be stored outside required geographies, increasing regulatory risk and limiting adoption of cloud-delivered secure access solutions.
Supported deployments
This feature applies to all Citrix Secure Private Access deployments, including both service and hybrid models, and is especially relevant for organizations with regional data residency, compliance, and regulatory requirements.
Configuration
Selecting a region is a one-time setting during onboarding of the Secure Private Access service or a hybrid deployment. After it is set, all data remains in the selected region, with no impact on ongoing operations or user workflows.
- Log in to Citrix Cloud and then click Secure Private Access.
- Select Setup for cloud or Hybrid and then click Continue.
- In Select deployment region, select the region where your data must be stored. The available regions are based on your Citrix Cloud account region.
- Click Continue.
Limitations
Some of the limitations of data regionalization are:
- Data regionalization applies to customer-owned configuration data at rest and user access request for application data. Other data types (such as telemetry or in-transit data) might not be restricted to the selected region.
- There are dependencies on other Citrix Cloud services that operate globally, which might not follow the same regional boundaries.
- This is a one-time configuration during onboarding and cannot be changed later.
- The feature is available for new customers only.