How are data transfers outside the EU handled?

Upvio complies with global data protection standards, including the GDPR, which is recognized internationally.

Upvio utilizes servers that meet GDPR requirements and ensures data protection through mechanisms such as encryption and the EU-U.S. Data Privacy Framework. This framework allows for secure data transfers outside the EU, including to Canada, while maintaining adequate protection levels.

Legal Basis:

Transfers to the USA rely on Standard Contractual Clauses (SCCs)embedded in AWS’s GDPR Data Processing Addendum (DPA), which applies automatically to all customers. 

Supplementary Safeguards:  
AWS adheres to the EU-U.S. Data Privacy Framework (DPF), which the European Commission deemed adequate in July 2023. This provides an additional legal basis for transfers.