Strategy

Where your CRM data is stored and why it matters

What data residency means, where global CRMs physically keep data, and what a business in Uzbekistan risks when customer contacts are stored abroad.

7 min read

DATA RESIDENCY · CRM

Your CRM data physically sits in a data centre the vendor chose — most often in the EU, the US or Russia. Residency means data belonging to customers in Uzbekistan stays in the country. Zukko.AI keeps it in Uzbekistan, with on-prem available for CIS banks. Where exactly contacts, conversations and call recordings live is not a technical question but a question of trust and of law.

What data residency is

Data residency is the principle that data is physically stored on servers in a specific country and does not leave it without an explicit basis. For a business in Uzbekistan that means customer contacts, deal history and conversations sit on a server in the country rather than in someone else’s jurisdiction.

Why that matters here in particular:

  • The law. ZRU-547 “On Personal Data” (as amended by ZRU-1125 of 26 March 2026) requires localisation for biometric data, genetic data and telecom subscriber data.
  • Call recordings. Voice biometrics may be present in call recordings — in which case “the server is in Uzbekistan” remains a live requirement.
  • Regulators. CIS banks and regulated companies require in-country storage and on-prem regardless of how the law is relaxed.

Where global CRMs keep data

Most international CRMs keep data in EU, US or Russian data centres and do not offer residency in Uzbekistan or on-prem for a bank. That is a structural limitation, not a setting.

Class of systemWhere data usually sitsResidency in UzbekistanOn-prem for a bank
Global CRMs (EU/US)EU / US data centresNoUsually not
CRMs from RussiaRussian data centresNoLimited
Zukko.AIServer in UzbekistanYesYes (CIS banks)

More on how the whole data-protection picture is built in the CRM security guide.

What a business risks when the data is abroad

  • Compliance. If data falls under the localisation requirement but sits abroad, that is a risk at inspection and to reputation.
  • Access and jurisdiction. Data is subject to the laws of the country where the server stands, not only to yours.
  • A barrier with banks. A regulated customer simply cannot pass an internal security review if the data is not in country.
  • Speed and control. The further the server, the less control you have over who gets access to the data and how.

Where Zukko.AI stores data

Zukko.AI stores data belonging to customers in Uzbekistan inside the country, and on-prem / private cloud is available for CIS banks and regulated companies. Data is protected by AES-256 encryption at rest and TLS 1.3 in transit, access is separated by role (RBAC), and every action is captured in the audit trail. This is support for ZRU-547 compliance, not a legal guarantee. How access control and storage work is set out on the Security page, and the data perimeter itself under AI-CRM.

What the business gets

  • Data in country — residency in Uzbekistan by default, on-prem for CIS banks.
  • Readiness for inspection — a server in the country removes the main compliance question.
  • Full access control — RBAC and the audit trail show who saw the data.
  • Less legal risk — the data is not subject to a foreign jurisdiction without a basis.

If the business records and analyses conversations, voice is added to the perimeter — how that works is described under Call analysis. A comparison of jurisdictions is in “Data in Uzbekistan vs Russia/EU”.

Frequently asked questions

Where is my CRM data physically stored?

Global CRMs keep it in EU, US or Russian data centres; with Zukko.AI, data belonging to customers in Uzbekistan is stored in the country, and on-prem is available for CIS banks.

What is data residency in plain words?

It is when data physically sits on a server in a specific country and does not leave it without an explicit basis.

Is my company obliged to store data in Uzbekistan?

Localisation is mandatory for biometric data, genetic data and telecom subscriber data (ZRU-547 as amended by ZRU-1125); banks and regulated companies require in-country storage regardless.

What does a business risk if the data is abroad?

Compliance risk, a foreign jurisdiction over the data, and the inability to pass a security review with regulated customers.

Does Zukko.AI offer on-prem?

Yes — on-prem / private cloud for CIS banks and regulated companies, with the data held in country.

DEMO

Launch an AI employee on your own channels

We will assemble a demo on your real chats from Instagram, Telegram and telephony — you will see the result on your own numbers. SMB launch from 2 hours.

Uzbek, Russian and English. Connects to your channels and systems.