Answer the question directly
State the region or provider if you know it, in one sentence.
Link your public documents
Point to your privacy and security pages instead of paraphrasing them.
Do not guess
If you are unsure, say you will check and name who will answer.
Cover the common follow-ups
Be ready for questions about backups, subprocessors and deletion.
Hand over legal questions
Send contract or compliance wording to the person who owns it.
Keep the answer on file
Save the approved wording as a saved reply so everyone says the same thing.