CloudAlls records the vendors and locations used for each product. Transfer safeguards depend on the originating jurisdiction, recipient country, controller or processor role, and applicable contract.
Customer-specific transfer information is provided through the applicable contract, DPA, security schedule, or subprocessor notice. Public notices identify the categories of recipients, processing purposes, and available change-notice process.
Where required, agreements use adequacy decisions, standard contractual clauses, the UK IDTA or Addendum, binding corporate rules, or another lawful mechanism. Processor terms cover instructions, confidentiality, security, rights assistance, breach escalation, subprocessing, deletion, return, and audit evidence.
For a product-specific data-location or subprocessor request, contact the privacy and complaints team with the relevant service and contracting entity.