File storage in France, operated in Europe

What is hosted in Europe, concretely

Data residency claims are useful only when they identify the data in question. FileSendX distinguishes uploaded file storage from the processors used by the wider service:

• The operator is European: FileSendX is run by Dynamic Foundries, a company registered in France. French legal mentions, EU jurisdiction.
• The infrastructure is European: application, database, and storage run on EU infrastructure in France.
• Uploaded file objects are stored in France. A recipient may download a copy elsewhere; storage residency does not prevent the recipient from saving or sharing that copy.
• Transactional email (download notifications, password resets) is sent from EU mail infrastructure, not from a US transactional-mail provider.
• Fonts and styles are self-hosted. Separate services such as abuse prevention and consent-gated analytics have their own documented processing boundaries.
• Separate service processors include Stripe for payments, Cloudflare Turnstile for abuse prevention, and consent-gated Google Analytics. The privacy policy documents their roles and safeguards.

Why the exact data path matters

A company address and a server location answer different questions. For a file-transfer service, ask where the uploaded object rests, whether it is replicated elsewhere, how long it remains available, and which processors receive account or payment data.

Uploaded file objects are stored in France. The privacy policy describes the broader service, including other data categories and processors; recipient downloads can take files to other locations.

GDPR controls and responsibilities

• The data controller is in the EU, so your GDPR rights are enforceable without transatlantic gymnastics.
• Transfers expire. With burn-after-reading, stored bytes enter cleanup after a two-hour delivery grace period. Transfer metadata remains in the sender's history after file deletion.
• FileSendX does not antivirus-scan, inspect, or train AI on uploaded file contents. It does process the metadata required to deliver and administer a transfer.
• Account deletion and data-subject request channels are documented in the privacy policy.

These controls support compliant use, but they do not make every transfer automatically compliant. Each customer remains responsible for the purpose, recipients, and legal basis of its processing.

The fine print lives where it should: in the privacy policy, which names sub-processors, retention periods, and your rights. Read the privacy policy.

Comparing on sovereignty

If you're choosing between transfer services on data-residency grounds, the flag on the marketing site tells you little. Ask where the bytes rest and who can be compelled to hand them over. See how FileSendX compares with WeTransfer.