As of 20 October 2026, version 2.1 of our data processing agreement applies. The reason is our new backup service uBackup, for which we have added a sub-processor. Nothing else has changed compared to version 2.0 of 1 September.
Why a new sub-processor
uBackup keeps a recovery copy of your Microsoft 365 data in a separately managed European environment. That copy is deliberately kept outside the Microsoft environment: with a different infrastructure provider and under separate management. If something happens to your tenant or your admin accounts, the recovery copy stays available.
That infrastructure is provided by a European supplier of servers and storage in Germany. Because that supplier stores personal data of our customers, it is a sub-processor and belongs in the data processing agreement.
How your data is protected with uBackup
- Stored in the EU: the recovery copies are kept in data centres in Germany. No data is transferred to countries outside the EU/EEA.
- Encrypted: the data is encrypted in transit and at rest.
- Within our ISMS: uBackup is developed and managed within our ISO/IEC 27001:2022 certified management system. The new sub-processor is covered by our annual supplier and sub-processor review.
- Only for uBackup customers: the new sub-processor only processes data of customers who use uBackup.
Where to find the data processing agreement
The data processing agreement and the current list of sub-processors are available in the Universal Customer Portal. That is also where we announce changes to the list. You can find an overview of all changes since 2023 in our article on the new data processing agreement as of 1 September 2026.
What does this mean for you?
You don't need to do anything. The updated data processing agreement applies automatically. If you object to the new sub-processor, or want to know more about how we handle your data, please email so@universal.cloud.
Wondering whether an independent European recovery copy is right for your organisation? Read more about uBackup.
