Your Company's Financial Data Sits on AWS eu-west-1. That's Amazon's Jurisdiction, Not Yours.
Cloud Infrastructure Residency and the Legal Boundaries of Business Data Sovereignty
---
A restaurant owner in Nice received a tax audit notice on a Tuesday morning in October. Registered letter, DGFIP — France's tax authority — requesting her complete financial records within 15 days. She called her accounting software vendor immediately. They told her the data was on Amazon's servers in Ireland and that access requests during audits could take "several weeks to process through international channels." She had 15 days. She hadn't known where her data was until she needed it fast.
She's not unusual. She's typical.
---
Where Your Data Actually Lives
Where is your company's financial data right now? If you're using Sage, Cegid, or Pennylane, the answer is probably: Amazon's servers, in Ireland. Not France. The country you registered your company in, file your taxes in, employ people in — that's not where your invoices, your employee salaries, and your bank reconciliation are stored.
AWS eu-west-1 is Amazon's primary European data center, located in Dublin, Ireland. The majority of French accounting software vendors store their French customers' data there because Irish hosting costs roughly 30% less than French alternatives. France has its own certified cloud infrastructure — OVHcloud in Strasbourg, Scaleway in Paris. Almost no major accounting software vendor uses it by default. The cost savings go to vendor margins, not to you.
Sage, Cegid, and Pennylane are "French" in the sense that the company is registered in France, the interface is in French, and the software handles French compliance requirements. They are not French in the sense that your data lives in France. Those are different things, and the distinction matters on specific days.
---
Why 99% of Days It Doesn't Matter — and 1% It Really Does
For 99% of the days you run your business, data residency is invisible. You log in, issue invoices, run payroll, file declarations. Ireland versus France makes no perceptible difference to the speed or reliability of the software.
Tax audits are the 1%. DGFIP — the Direction Générale des Finances Publiques, France's tax authority — can open an audit by registered letter on any ordinary morning. From the date of that letter, you typically have 15 days to produce your FEC: the Fichier des Écritures Comptables, a standardized electronic accounting file that must contain every transaction from the past three years (and up to six years in some cases). Your accountant will tell you this file must be perfect — format, completeness, traceability. It's the document tax inspectors use to check everything.
If your FEC is stored on Amazon's servers in Ireland and any complication arises — data access dispute, international data transfer request, vendor response time — 15 days compresses very quickly. Not because the law changed. Because nobody told you your data was in another country when you signed up.
That fact sits on page 14 of the terms of service, in a section called "Infrastructure," using the phrase "eu-west-1 data center" without explaining what that means.
---
What the Vendor Isn't Telling You
Most vendors say they are GDPR compliant when you ask. GDPR — the EU's General Data Protection Regulation — sets rules for how personal data is stored and processed. That's accurate: Amazon's Ireland facility falls within the EU, and GDPR applies. GDPR compliance in Ireland is not the same as your data being in France. Ask your vendor specifically: "In which country is my data physically stored?" Most can answer. Ask: "If DGFIP requests my FEC within 15 days, what is your process and your typical response time?" Fewer have prepared answers to that one.
The cost savings from Irish hosting go entirely to the vendor. Nothing about storing your data in Ireland benefits you. You absorb the residency risk. The vendor keeps the margin.
One reason this has never been advertised clearly: it wouldn't help sales. "Your French accounting data — stored in Amazon's Dublin data center" is accurate, but it's not a headline any sales team chooses.
---
The Audit Scenario, Specific and Concrete
Consider this: a freelance consultant in Paris, using cloud accounting software, discovered where her data lived when her laptop died and she needed to verify a specific invoice for a contract dispute. Getting a certified copy took three weeks instead of the hours she expected. Her client moved on. The invoice was €4,200. By the time the data arrived, the dispute window had closed.
Audits have firmer deadlines than contract disputes. A 15-day FEC request with data in Ireland is manageable under normal conditions. Add one complication — a vendor ticket backlog, an international data access procedure, a weekend in between — and it becomes a problem your accountant can't solve with a phone call.
This is not a theoretical risk. It's a specific chain of events with a specific timeline that happens to specific businesses every year in France. Most of those business owners didn't know where their data was until it mattered.
---
Liberté: Data in France, From Day One
Liberté stores your data in France — not in Amazon's Ireland facility, not in any American-owned infrastructure. The government API connections (net-entreprises.fr for payroll declarations, impots.gouv.fr for tax filings, Open Banking via PSD2 — the EU regulation that gives any authorized software access to your bank transaction data at no charge — for bank reconciliation) run on French-hosted infrastructure. Your FEC is generated in France and accessible immediately — not on a 15-day international data request timeline.
When DGFIP sends an audit letter, your accountant can pull your complete FEC within minutes. No international procedures, no vendor ticket, no explaining to a tax inspector why your "French" data is in Dublin.
Switching to a French-hosted platform that stores data on French soil used to mean paying a premium — OVHcloud and Scaleway charge more than Amazon's Ireland facility. With Liberté, the platform is free. The data residency protection costs you nothing beyond the decision to switch.
---
Three Questions Worth Asking Today
Before the registered letter arrives: ask your current accounting software vendor three questions.
One: In which country is my data physically stored? Ireland, France, or somewhere else?
Two: If DGFIP requests my FEC within 15 days, what is your process and your typical response time?
Three: Is French-hosted storage available to me, and what does it cost?
The answers tell you the actual risk you're carrying. Most vendors can answer the first question. Their answers to the second and third reveal whether they've thought seriously about what data residency means for a French tax audit.
---
The Direction of Travel
French data residency rules for business financial records are tightening. CNIL — France's data protection authority — has published guidance making the direction clear, even if specific mandates are still being finalized. Businesses already on French-hosted software won't need to do anything when rules change. Businesses on Amazon's Ireland facility will need to migrate, on a regulator's timeline rather than their own.
Migrating accounting software during a regulatory deadline is the hardest migration. Migrating before one — when you choose the timing, when there's no audit pending, when you can verify everything at your pace — costs an afternoon.
Your company's financial data should be where your company is: France. If it's in Ireland right now, you're carrying a risk you didn't choose and don't need to carry. Liberté is free, stores your data in France, and connects directly to the same government APIs your current software uses.
Don't find out where your data is during the audit that needs it.