EU Data Residency Lint for Terraform

Finds Terraform resources that put personal data outside the EEA - regions, bucket locations, replicas, backups, state backends and SaaS endpoints. Runs entirely in your browser — nothing is uploaded.

Same engine as the VS Code extension, byte for byte.

Get the complete version $29

This page is the working piece. The full pack has everything below.

Finds the resources in your .tf files that put personal data outside the EEA, and exports the Article 30 transfer register

A GDPR consultant day spent mapping transfers by hand for an Article 30 record starts near $800.

Buy the full version — $29

Questions people ask

What does EU Data Residency Lint actually do?

It reads your Terraform files and names every resource that puts personal data outside the European Economic Area: provider regions, bucket and storage locations, read replicas, backup copy targets, the state backend, log sinks, identity pools, AI endpoints and US telemetry hosts. Each finding carries the line, the country and the EEA region to use instead.

Who is it for?

Platform and DevOps engineers at EU SaaS companies who accept Terraform written by an assistant and are later the ones asked which countries hold customer data. It also suits the solo founder who is their own data protection contact and has no consultant on retainer to read 88 lines of HCL.

Why is a free scanner or a chatbot not enough?

checkov, tfsec and trivy grade encryption, IAM and public access; none of them has an EEA region allowlist, so us-east-1 passes clean. A chatbot sees the snippet you paste, not the provider alias three files away, the destination ARN inside a backup plan, or the state backend.

What is free and what needs a licence?

Linting is free and finished: run it on a file or the whole workspace, see all 22 findings the sample produces, and fix them. The licence answers the next question instead - it exports the repository as an Article 30(1)(e) transfer register, one row per resource, region, country and legal basis.

What would this cost without the extension?

A GDPR consultant day spent mapping transfers by hand for an Article 30 record starts near $800, and it is stale the next time someone adds a replica. The extension is $29 once, one licence key per person or CI seat, with a 7-day refund. Under Article 83(5) the upper fine band is 4% of worldwide annual turnover.

Ask about this tool

One question, answered by the person who built it. Your email only if you want the answer sent.

Want the full version?
Enter your email and we send the download link.
ENDEJAESPT

Find a tool