Project Clover Update: Data migration to TikTok's Norwegian data centre has begun

TikTok is proud to announce two major milestones on Project Clover, our industry-leading data-security initiative:

• European user data is now being migrated to and stored at our new data centre in Norway
• Cybersecurity experts NCC Group are now continually monitoring our new security measures

TikTok has committed significant resources and investment in implementing our groundbreaking data security programme, Project Clover, and today we are pleased to announce we have hit further significant milestones in this €12 billion project.

The first building in our Norwegian data centre is now operational and migration of European* user data from the US has begun. This is the second of our European data centres to come online, with our first data centre in Ireland coming online last year. Our dedicated European enclave, where the data of our European users is now stored by default, is hosted on servers in our US and Ireland data centres and now in Norway.

We are also pleased to announce that NCC Group, the independent security provider for Project Clover, has begun continuous monitoring of the security gateway environments that provide additional protection to our European data.

These additional barriers control access to data through supervised security gateways designed to enforce technical protocols that mean only approved employees can access certain data types. Since last summer, for example, new security protocols have been in place designed to ensure that restricted data stored in our new European enclave, such as phone numbers and IP addresses, cannot be accessed by employees based in China. NCC Group has inspected the source code for the gateways and will inspect any updates over time. This real-time continuous monitoring will identify and allow TikTok to respond to potential security alerts.

Since we first announced the details of Project Clover in 2023, we have made significant progress in implementing this groundbreaking initiative at speed:

• NCC Group in place as the independent security provider, now continuously monitoring and verifying our data security measures, a level of transparency and oversight unmatched amongst online platforms.
• The establishment of a dedicated European enclave, where our European user data is now stored by default
• Ireland and Norway data centres online, data migration underway
• Additional security barriers around our European user data launched, which further restrict access to data. NCC Group is now independently monitoring these barriers.

The start of data migration to our Norwegian data centre and continuous independent monitoring of our data security by NCC Group marks another pivotal moment for TikTok and our community. The measures being put in place under Project Clover mean our 150 million-strong European community are protected by industry-leading data security.

*'European' refers to EEA countries, the UK and Switzerland