It has been mentioned to me that where client data is held in cloud severs not in Australia, that there may be some issues with meeting Australian Privacy Act obligations - the big issue is the US Patriot Act and access to information for data held in the US. 

Can I ask;

Does Zoho confirm to the Australian Privacy Principals and if not specifically, in which country is the data held (so I can determine if that countries data/privacy provisions are suitable).

Thanks.