Info icon
End of Life Notice: For Trend Cloud One™ - Conformity Customers, Conformity will reach its End of Sale on “July 31st, 2025” and End of Life “July 31st, 2026”. The same capabilities and much more is available in Trend Vision One™ Cloud Risk Management. For details, please refer to Upgrade to Trend Vision One
Logo of Trend Micro
Use the Knowledge Base AI to help improve your Cloud Posture

Check for Regional Data Residency and Location Controls

Trend Vision One™ provides continuous assurance that gives peace of mind for your cloud infrastructure, delivering over 1100 automated best practice checks.

Risk Level: Medium (should be achieved)
Rule ID: Dialogflow-001

Ensure that your Google Cloud Dialogflow CX agents are deployed in appropriate regions to meet data residency requirements and support AI/ML Data Location commitments. These commitments ensure that AI/ML processing (like training, prediction, and tuning) and data at rest occur only within the chosen US or EU region(s).

This rule resolution is part of the Conformity Security & Compliance tool for GCP.

Security
Operational
excellence

Choosing the incorrect region for your Google Cloud Dialogflow CX agents could violate data residency and compliance regulations for your AI/ML data. Since location settings are immutable after agent deployment and configuration, correct initial setup is crucial for ensuring long-term compliance.

Audit

To determine if your Google Cloud Dialogflow CX agents are deployed in appropriate regions, perform the following operations:

Checking Dialogflow CX agents for regional data residency and location controls using GCP Command Line Interface (CLI) is not currently supported.

Using GCP Console

01 Sign in to the Google Cloud Management Console.

02 Navigate to Conversational Agents (Dialogflow CX) console available at https://conversational-agents.cloud.google.com/.

03 Select the Google Cloud Platform (GCP) project that you want to examine from the Project dropdown menu available in the console top navigation bar.

04 In the Agents section, choose the Dialogflow CX agent that you want to examine.

05 On the agent page, choose the Settings button (i.e., gear icon) from the resource top-right menu.

01 Select the General tab to access the general configuration settings available for the selected agent.

06 Check the Agent location configuration attribute value to identify the region of the selected agent. If the Agent location attribute value is not set to a US or EU location (region or multi-region), the selected Dialogflow CX agent was not deployed to an AI/ML Data Location-compliant region.

07 Repeat steps no. 4 - 7 for each Conversational Agents (Dialogflow CX) agent available within the selected GCP project.

08 Repeat steps no. 3 - 8 for each GCP project deployed within your Google Cloud account.

Remediation / Resolution

Because the location settings are immutable after agent deployment, you must redeploy your Google Cloud Dialogflow CX agent to a compliant location (region). To do this, peform the following operations:

Configuring regional data residency and location controls for Dialogflow CX agents using GCP Command Line Interface (CLI) is not currently supported.

Using GCP Console

01 Sign in to the Google Cloud Management Console.

02 Navigate to Conversational Agents (Dialogflow CX) console available at https://conversational-agents.cloud.google.com/.

03 Select the Google Cloud Platform (GCP) project that you want to access from the Project dropdown menu available in the console top navigation bar.

04 In the Agents section, choose Create agent, and perform the following operations to create a new, compliant Dialogflow CX agent:

  1. For Get started with Conversational Agents, choose Build your own to create your own agent.
  2. For Display name, provide a unique name for your agent.
  3. For Location, select the appropriate region where to deploy your Dialogflow CX agent. Choose an AI/ML Data Location-compliant region or multi-region within US or EU (e.g., europe-west2 - London, England, UK).
  4. For Time zone, select the appropriate time zone. Date and time requests are resolved using the time zone selected in this step.
  5. For Default language, choose the language the agent uses.
  6. For Conversation start, choose how your agent starts each conversation.
  7. Choose Create to deploy your new location-compliant Dialogflow CX agent.

05 Repeat step no. 4 for each Conversational Agents (Dialogflow CX) agent that you want to redeploy, available in the selected GCP project.

06 Repeat steps no. 3 - 5 for each GCP project deployed within your Google Cloud account.

References

Publication date Jul 28, 2025

Related Dialogflow rules