Tool Overview:
InCountry

About InCountry

InCountry is a data residency platform that helps organizations isolate and manage regulated data within specific geographic boundaries while maintaining global operations. The platform provides infrastructure and services to address data sovereignty requirements across multiple countries, with particular emphasis on complex regulatory environments like China, where it operates through a partnership with Alibaba Cloud.

What does InCountry do?

The platform functions as a data residency layer between global applications and local data storage requirements. It enables organizations to store regulated data types such as personally identifiable information (PII), protected health information (PHI), and payment card information (PCI) within required geographic boundaries while still allowing global applications to function seamlessly. The solution includes features for real-time data synchronization, field-level encryption, and policy-based access controls.

InCountry's core technology revolves around its vault architecture, which provides secure data storage within specific countries. The platform implements a data firewall that uses IP validation and VPN detection to ensure data remains within designated geographic boundaries. For cross-border scenarios, the system offers anonymization and masking capabilities that allow organizations to maintain global reporting while complying with local data protection laws.

What makes InCountry different?

A distinguishing aspect of InCountry is its deep integration with major enterprise applications, particularly Salesforce. The platform provides a managed package through the Salesforce AppExchange that enables organizations to configure regulated fields, implement hashing and tokenization, and add data residency capabilities to forms, reports, and service console features while maintaining a single global Salesforce instance.

The platform's architecture includes redundant points-of-presence within each country, offering active-active failover capabilities. This infrastructure can be deployed as a SaaS solution, single-tenant installation, or on sovereign cloud platforms. For China specifically, InCountry maintains a fully sovereign solution operated by Alibaba Cloud, which has achieved regulatory approvals from entities like the Cyberspace Administration of China.

The security architecture incorporates multiple layers of protection, including searchable encryption using NIST standards, AI-powered data loss prevention for detecting PII in native languages, and comprehensive audit logging. The platform supports various authentication mechanisms and allows both policy-based and fine-grained authorization controls at the record and field levels.

Use cases and industries

InCountry serves organizations that need to maintain global operations while meeting data residency requirements in multiple jurisdictions. The platform is particularly relevant for enterprises using global SaaS applications in regulated industries such as healthcare, financial services, and life sciences, where data sovereignty requirements can prevent standard cloud deployments.

Common deployment scenarios include extending global Salesforce instances into regulated markets, facilitating cross-border data transfers with appropriate anonymization, and enabling global reporting while maintaining local data isolation. The platform supports both cloud and on-premises implementations, with specific configurations available for various regulatory frameworks including China's Personal Information Protection Law (PIPL), Data Security Law (DSL), and Cybersecurity Law (CSL).