00 · Header

T1 · Control Hub & Platform Foundations

Data Residency & Security Basics

Gateway Control Hub T1-R07 AdminControl HubIdentityServices
Illustrated scene for Data Residency & Security Basics. Original drawing, not a product screenshot.
Sequence · Admin → Control Hub → Identity → Services AdminControl HubIdentityServices 123
Color-coded sequence: Admin → Control Hub → Identity → Services. A packet moves along the arrows. Reduced motion keeps every step visible.

The country you select while provisioning permanently sets the GEO for the organization’s users and encryption keys. Webex does not currently support migrating between GEO locations. Meetings follow the site time zone. Calling follows the principal place of business given at order time. You read the result at Account > Info > Data Locations.

Room T1-R07Version v0.1last-verified: 2026-10-14Difficulty L2Est. time 70–90 minPrereq T1-R01Reading 18 min

01 · Executive summary

Five lines, then why it matters

  • Check Meetings, Messaging, and common application data at Account > Info > Data Locations. Check Contact Center at Contact Center > Settings > Service Details > Country of Operation. [cite:1]
  • CountryCodeGEOMapping.xlsx maps a country to a region. On the User page tab, cell B3 is the country and cell B4 is the region. [cite:2]
  • Space content is stored in the region of the organization that owns the space. A 1:1 chat that includes a North America or rest-of-world user is stored in that GEO. [cite:1]
  • Compliance officers keep visibility of user content regardless of where it is stored, including eDiscovery and CASB. [cite:1]
  • Eligible legacy moves named on August 29, 2025 are European Union common application data, Saudi Arabia Webex Meetings sites, and UAE common application data. That header is older than 12 months. re-check [cite:3]
Why it matters. A design that picks the country after the org exists is already late. Calling, Meetings, and Messaging do not share one residency switch.

02 · Architecture map

Three residency decisions, one Account page

  • 1Country Selector
  • 2Meetings time zone
  • 3Calling order
  • 4Account info
Mermaid source (not rendered)
flowchart LR
  Country[Country Selector] --> Messaging
  TZ[Meetings time zone] --> Meetings
  Order[Principal place of business] --> Calling

Studio asset still required: assets/diagrams/T1-R07/arch.svg

03 · Concept deep-dive

Residency is per service

Data residency, formerly called data locality, stores user data in regional data centers corresponding to the customer’s location. The offering described in the overview is for new customers. The retrieved article is dated September 24, 2026. [cite:1]

GEOKMSCountry SelectorData LocationsCountry of Operation
VISUAL placeholder · assets/images/T1-R07/hero.png · Studio draws three doors: country, time zone, and order address.

Checkmarks in the September 24, 2026 table

The article’s table marks where a service is offered. An empty cell is not a city name this room will invent. Read the privacy data sheet the article names before you add a rest-of-world site.

ServiceRegions the table marksCite
Webex MeetingsUS, EU, Canada, UK, Japan, Australia, Singapore, Saudi Arabia. India is unmarked in that row.[cite:1]
Webex MessagingUS, EU, Japan, Australia.[cite:1]
Webex CallingUS, EU, Canada, UK, Japan, Australia, Singapore, Saudi Arabia, India.[cite:1]
Common identityUS, EU, Canada, Japan, Australia, Singapore, India. UK and Saudi Arabia are unmarked in that row.[cite:1]
Encryption keysUS, EU, Japan, Australia.[cite:1]
Webex Contact CenterUS, EU, Canada, UK, Japan, Australia, Singapore, India. Saudi Arabia is unmarked in that row.[cite:1]
Hybrid servicesData security, calling, calendar, directory, video mesh, and messages: US, EU, Canada, UK, Japan, Australia, Singapore. Saudi Arabia and India are unmarked in that row.[cite:1]

Rules that survive a design review

RuleSentence to keepCite
Permanent GEOSelecting the country permanently sets the GEO for users and encryption keys. Migration between GEO locations is not supported.[cite:1]
Which countryIf users are mostly in one country, select that country even when it differs from the business address. If users are spread out, select the country with the highest user count. Everyone in the org is stored in that GEO.[cite:1]
Messaging map in the FAQEU, Middle East, and Africa customers are provisioned to EU data centers. US, Canada, APAC, and South America customers are provisioned to US data centers. Canada can store common application data and user profiles in Canadian data centers.[cite:1]
CallingStored in the data center closest to the principal place of business the partner provided during ordering.[cite:1]
Contact CenterCountry of Operation in the setup wizard creates the tenant in the closest data center from the mapping in Data Locality in Contact Center.[cite:1]
India admin activityAdministrator activities for Webex Calling and Contact Center events originating from India are stored in data centers in India. Customers cannot select or change where administrator activities are stored.[cite:1]
PartnersWebex Partners in one region can create customer organizations in any region where the services are offered.[cite:1]
Collaboration across regionsUsers can meet, message, and call users in other organizations without separate accounts in foreign clusters.[cite:1]
Audit searchRetention is 12 months in most regions and three years in India. Search includes only the past year.[cite:1]
Tip

Download CountryCodeGEOMapping.xlsx and read cell B4 after you pick the country in B3. The file starts downloading when you open the link in article wej14b. [cite:2]

Gotcha

Meetings data-center cities in article WBX28754 include a note that locations may change, and that free user accounts may be stored outside the account holder’s region. Billing data in that article is Texas and North Carolina. Analytics data in that article is California and Texas. That article is about Meetings data centers and iPOPs. It is not the Messaging GEO list. [cite:4]

Security neighbor

This room is residency and the control that proves it. SSO claim names, role exclusivity, and Calling emergency calling stay in T1-R02, T1-R05, and T2-R06.

04 · Ecosystem

Ecosystem and sister technologies

AdminControl HubIdentityServices This room
Mini map of the neighbors named on this room’s sequence. Orientation sketch, not a new product claim.

Glossary

Data residency
Storage of user data in regional data centers that correspond to the customer’s location. Formerly called data locality. [cite:1]
GEO
The location set at provisioning for the organization’s users and encryption keys. A later move between GEOs is not supported. [cite:1]
KMS
The Key Management Service in the organization’s region. It handles requests for keys that encrypt and decrypt spaces, messages, and content in Webex App. [cite:1]
Country Selector
The Control Hub drop-down during provisioning that maps a country to a data center. [cite:1]
Data Locations
Account > Info > Data Locations, where an admin verifies Meetings, Messaging, and common application data. [cite:1]
Country of Operation
The Contact Center setting that confirms that service’s residency. [cite:1]
Space owner
The organization whose region stores the content that appears in the space. [cite:1]
iPOP
Internet Point of Presence. The Meetings article lists them separately from data centers. [cite:4]

Mind map

Mermaid source (not rendered)
mindmap
  root((Residency))
    Country
    Meetings
    Calling
    Contact Center
    Compliance

Sister-technology matrix

SisterWhat it isWhy it matters hereConfig touchpointTypical failureCite
IdentityEmail address and user ID stored in the geographic region. Authentication is processed locally in the region.T1-R02 creates the people. This room says where those identities live.Country Selector at create.Planning a GEO move after sync.[cite:1]
Webex CallingCalling data near the principal place of business.A different switch from the Messaging country.Order-time address from the partner.Assuming the Country Selector also places Calling media.[cite:1]
Webex Contact CenterTenant in the closest data center for Country of Operation.Its own Control Hub path.Contact Center > Settings > Service Details.Reading only Account > Info.[cite:1]
MeetingsSite time zone picks the data center. EU cities use Frankfurt.Independent of the Messaging GEO.Site provisioning time zone.One country for every workload.[cite:1]
ComplianceeDiscovery and CASB still see content across regions.The compliance officer role is T1-R05. Visibility is this article.Compliance officer, external communication controls.Assuming a foreign space is invisible.[cite:1]
Hybrid servicesHybrid Directory, Calendar, Calling, Video Mesh, Data Security, Messages.The overview says they are supported in the region. The table shows which columns are marked.Hybrid service setup after the GEO exists.Quoting a hybrid service in an unmarked column.[cite:1]
Audit logAdministrator activity retention.One year to search, three years retained in India.Administrator activity log.A search older than one year.[cite:1]
AnalyticsT1-R06 windows, and the Meetings article’s analytics locations.Do not merge a 13-month Pro Pack window with a data-center city.Analytics in Control Hub.Teaching California as the Messaging GEO.[cite:4]

Integration edges

FromToMechanismWhat movesCite
Country SelectorMessaging GEOCountry-to-DC mapOrg identity, user identities, keys, encrypted content[cite:1]
SpreadsheetAdminCountryCodeGEOMapping.xlsxB3 country, B4 region[cite:2]
Meetings time zoneMeetings data centerSite provisioningMeetings data. EU city maps to Frankfurt.[cite:1]
Partner orderCalling data centerPrincipal place of businessCalling data, closest data center[cite:1]
Contact Center wizardContact Center tenantCountry of OperationTenant in the mapped data center[cite:1]
User contentOwner regionSpace ownership rulesMessages, files, and metadata for that space[cite:1]
AI outputSame data center as user contentStorage ruleAI-generated meetings and messages content[cite:1]
AdminAccount infoControl Hub readData Locations for Meetings, Messaging, common application data[cite:1]

Cross-platform bridges

Orientation only. The residency article does not publish a Microsoft 365 or Amazon region crosswalk. Users can still collaborate across Webex regions with one identity. [cite:1]

Future-integration hooks

  • The article says Messaging locations were introduced with the intention of expanding later. Treat new regions as a documentation change, not as a promise this room can schedule.
  • Legacy customers eligible for a regional move are pointed at the data-center migration article. re-check s0lk5g. Header August 29, 2025. [cite:3]
  • Canon planning: record Account > Info > Data Locations from a lab org next to the country that was selected. Study evidence only.

Ecosystem troubleshooting

SymptomLikely sister-system causeCheckFixCite
Messaging and Meetings show different regionsThey are set by different inputs.Country Selector versus the site time zone.Read both. Frankfurt for an EU city is a Meetings rule.[cite:1]
A search of admin activity older than a year returns nothingSearch includes only the past year, even where retention is three years in India.The search window.Stay inside one year for the search. Retention and search are different sentences.[cite:1]
Contact Center region is missing on Account > InfoThat page is Meetings, Messaging, and common application data.Contact Center > Settings > Service Details > Country of Operation.Use that path.[cite:1]

05 · Flow

From country selection to the Account page

StepFromToProtocolNotesCite
1AdminCountry SelectorProvisioningThe choice permanently sets the GEO for users and keys.[cite:1]
2CountrySpreadsheetCountryCodeGEOMapping.xlsxB3 country, B4 region. Header April 14, 2026 on wej14b.[cite:2]
3Identity serviceRegional data centerLocal processingAuthentication requests are processed in the region.[cite:1]
4KMSWebex App contentKey requestsKeys are created and stored in the region.[cite:1]
5Meetings siteMeetings data centerTime zoneEU city to Frankfurt. Otherwise the closest data center.[cite:1]
6PartnerCallingOrderPrincipal place of business.[cite:1]
7Contact Center wizardTenantCountry of OperationClosest data center from the contact-center mapping.[cite:1]
8AdminAccount > InfoReadData Locations. Contact Center uses its own settings path.[cite:1]

06 · Config

Click paths

  1. During organization provisioning, use the Country Selector. Prefer the country where most users are, even if the business address differs. [cite:1]
  2. Before you commit, download CountryCodeGEOMapping.xlsx. On the User page tab, set B3 and read B4. Or browse the Country Code GEO mapping tab. [cite:2]
  3. After the org exists, sign in to Control Hub and open Account > Info > Data Locations for Meetings, Messaging, and common application data. [cite:1]
  4. For Contact Center, open Contact Center > Settings > Service Details > Country of Operation. [cite:1]
  5. When you create a Meetings site, the time zone selects the Meetings data center. An EU city time zone is Frankfurt in this article. [cite:1]
  6. For Calling, confirm the principal place of business the partner submitted at order time. The article does not give a Control Hub control that moves that choice. [cite:1]
  7. Do not plan a later move between Messaging GEOs. The article says that migration is not supported. [cite:1]
  8. If the customer is in a legacy migration program, read the data-center migration article before you promise a move. re-check [cite:3]

Screenshot placeholder. The paths above are the articles.

07 · Limits

Values the articles state

ItemValueSourceVerified?
GEO moveNot currently supported[cite:1]Quoted. Header September 24, 2026.
Audit retention12 months in most regions, 3 years in India[cite:1]Quoted
Audit search windowPast year only[cite:1]Quoted
EU Meetings cityFrankfurt[cite:1]Quoted
Messaging Europe hosts namedFrankfurt and Amsterdam[cite:1]Quoted
Spreadsheet cellsB3 country, B4 region[cite:2]Quoted. Header April 14, 2026.
Legacy migration eligibilityEU common application data, Saudi Arabia Meetings sites, UAE common application data[cite:3]re-check Header August 29, 2025.
Meetings DC noteLocations may change. Free accounts may be stored outside the holder’s region.[cite:4]Quoted. Header February 13, 2026.

08 · Troubleshooting

Eight failures that follow from the articles

SymptomLikely causeEvidenceFixCite
The org cannot be moved to another Messaging GEOMigration between GEO locations is not supported.The country chosen at create.The article’s recommendation is to choose the country before the org is created.[cite:1]
Users outside the chosen country still land in that GEOAll of the organization’s users are stored in the associated GEO.User distribution versus the selected country.That is the documented behavior. Pick the country with the highest user count when people are spread out.[cite:1]
A 1:1 chat is not in the European regionA participant is in the North America or rest-of-world GEO. The conversation content is stored there.The participants’ organizations.Read the ownership rule before you file a residency exception.[cite:1]
A space moved into a team kept its old regionSpaces created outside a team and then moved retain original ownership.Whether the space was created inside the team.Ownership follows the original owner, not the move.[cite:1]
Meetings data is in Frankfurt and Messaging is notAn EU city time zone selects Frankfurt for Meetings. Messaging follows the country map.Site time zone versus Country Selector.Treat them as two decisions.[cite:1]
Calling region does not match the Country SelectorCalling uses the principal place of business from the order.The partner’s order data.Read the Calling sentence separately.[cite:1]
India audit events are not in the region the admin pickedCustomers cannot select where administrator activities are stored. India-origin Calling and Contact Center admin events are stored in India.The activity’s origin.Use the article’s rule. There is no picker.[cite:1]
A free Meetings user appears outside the expected countryWBX28754 says free user accounts may be stored outside the account holder’s region, and data-center locations may change.Whether the account is free.Read that note before you treat the city list as a guarantee.[cite:4]

09 · Self-question ladder

Twelve rungs

L0What does the Country Selector set?

The GEO for the organization’s users and encryption keys, plus organization identity and encrypted user-generated content. [cite:1]

L0Where do you read Meetings and Messaging residency?

Account > Info > Data Locations. [cite:1]

L1Can you move the org to another GEO later?

The article says Webex does not currently support migrating between GEO locations. [cite:1]

L1Which Messaging regions does the FAQ name?

Europe, hosted in Frankfurt and Amsterdam, and North America and the rest of the world, hosted in the United States. [cite:1]

L2Where do EU-city Meetings go?

Frankfurt. Other time zones use the closest data center. [cite:1]

L2What sets Calling residency?

The data center closest to the principal place of business the partner provided at order time. [cite:1]

L3Who owns a group space?

The organization of the person who created it. Content is stored in that region. [cite:1]

L3Where is a cross-org 1:1 stored if one user is in North America or RoW?

In the North America or rest-of-world GEO. [cite:1]

L4How long can you search the audit log?

The past year. Retention is 12 months in most regions and three years in India. [cite:1]

L4Where is AI-generated content stored?

In the same data center as the user-generated content. [cite:1]

L5Which spreadsheet cells answer the country question?

B3 is the country. B4 is the region. [cite:2]

L5Does compliance stop at the region border?

The article says compliance officers continue to have visibility of user content regardless of where it is stored. [cite:1]

10 · Lab

Spreadsheet desk, no production org

11 · Quiz

Twelve questions

Q1MCQ

Can an organization move between Messaging GEOs?

Answer

Not currently. The country choice is permanent for users and encryption keys. [cite:1]

Q2MCQ

Where are Europe Messaging data centers named?

Answer

Frankfurt and Amsterdam. [cite:1]

Q3MCQ

An EU city time zone stores Meetings data where?

Answer

Frankfurt. [cite:1]

Q4MCQ

What sets Calling data placement?

Answer

The data center closest to the principal place of business provided at order time. [cite:1]

Q5MCQ

Where do you confirm Contact Center residency?

Answer

Contact Center > Settings > Service Details > Country of Operation. [cite:1]

Q6MCQ

Audit log search window?

Answer

The past year. Retention is 12 months in most regions and three years in India. [cite:1]

Q7Scenario

A 1:1 chat includes a North America or RoW user.

Answer

The conversation content is stored in the North America or rest-of-world GEO. [cite:1]

Q8MCQ

Which spreadsheet cells show country and region?

Answer

B3 and B4 on the User page tab. [cite:2]

Q9MCQ

Where is AI-generated message content stored?

Answer

In the same data center as the user-generated content. [cite:1]

Q10MCQ

Can a partner in one region create a customer org in another offered region?

Answer

Yes. [cite:1]

Q11MCQ

Does a compliance officer lose visibility when content is in another region?

Answer

The article says they continue to have visibility regardless of where the data is stored. [cite:1]

Q12Draw

Name the three inputs and the service each one places.

Answer

Country Selector for Messaging identities and content. Meetings time zone for Meetings. Principal place of business at order time for Calling. [cite:1]

12 · Audio

Slots for Studio

Transcript slot

Studio fills this.

Transcript slot

Studio fills this.

Transcript slot

Studio fills this.

13 · Interview

Oral answers

30 seconds. The Country Selector permanently sets the GEO for users and encryption keys. I cannot move that GEO later. I verify Meetings, Messaging, and common application data at Account, Info, Data Locations.

2 minutes. Messaging Europe is Frankfurt and Amsterdam for Continental Europe, the Middle East, and Africa. North America and the rest of the world is in the United States. If most users are in one country, I pick that country. If they are spread out, I pick the country with the most users, and everyone is stored there. Meetings use the site time zone, and an EU city is Frankfurt. Calling uses the principal place of business from the order. Contact Center uses Country of Operation. AI content stays with the user-generated content. Audit retention is a year in most regions and three years in India, and search is only the past year.

30 seconds, spaces. The creating organization owns a group space. A team owns spaces created in it. A space moved into a team later keeps its original owner. A 1:1 that includes North America or the rest of the world is stored in that GEO.

2 minutes, what I will not merge. I will not read the Meetings data-center list as the Messaging GEO. Free Meetings accounts may sit outside the holder’s region, and that list can change. I will not promise the August 29, 2025 migration regions without a re-check. Compliance visibility continues across regions. Partners can create customer orgs in any region where the service is offered.

What you will say about a later country change. The article says the organization stays in the GEO where it was created.

14 · Citations

  1. Data residency in Webex — help.webex — article oybc4fb — help.webex.com article oybc4fb — header September 24, 2026 — retrieved 2026-10-14. Country Selector, permanent GEO, service table, space ownership, audit retention, AI content, Calling order address, Contact Center country, Account > Info > Data Locations.
  2. Find the Data Residency Region That Maps to a Country — help.webex — article wej14b — help.webex.com article wej14b — header April 14, 2026 — retrieved 2026-10-14. CountryCodeGEOMapping.xlsx. Cell B3 country, cell B4 region.
  3. Data center migration plans for your organization’s data in Control Hub — help.webex — article s0lk5g — help.webex.com article s0lk5g — header August 29, 2025 — retrieved 2026-10-14. re-check. EU common application data, Saudi Arabia Meetings sites, UAE common application data.
  4. Where are the Webex Data Centers and iPOP Locations? — help.webex — article WBX28754 — help.webex.com article WBX28754 — header February 13, 2026 — retrieved 2026-10-14. Meetings data centers and iPOPs. Locations may change. Free accounts may be stored outside the holder’s region. Billing in Texas and North Carolina. Analytics in California and Texas.

15 · Re-engineer later

  • Open questions: whether s0lk5g’s eligible regions are unchanged since August 29, 2025.
  • Facts still TODO-verify: 0. The legacy migration list is re-check.
  • Assets missing: Data Locations screenshot, audio.
  • Ideas for v1.0: a three-column card for country, Meetings time zone, and Calling order address.
  • Next review: when oybc4fb adds a Messaging region or changes the no-migration sentence.

Sources and go deeper

Checked links were opened this month. A confirm row has no address because that page was not opened.

sources.json for this page.