MoodleCloud uses external services to provide Moodle sites and process billing.
MoodleCloud is the Moodle LMS hosted on Amazon Web Services (AWS).
MoodleCloud are not accredited with any ISO certifications, however services that we use may be (including AWS and Chargebee).
AWS is compliant with numerous standards (you can read more here: https://aws.amazon.com/compliance/iso-certified/) and https://aws.amazon.com/compliance/services-in-scope).
Your data resides in the AWS region you select at signup (either EU [Ireland], Australia or US). We are not able to change this region after you site is created.
MoodleCloud customers subscription data is held by Chargebee (their DPA is https://www.chargebee.com/privacy/dpa)