audit rights dpa residency · Privacy Policy

ComplyDo policy finding

“ Where your personal data is processed depends on which part of ComplyDo you interact with. The Platform: EU by default. The Platform is hosted in the EU; no Platform data leaves the EU/EEA without the Customer's prior documented instruction. The details are in our DPA. The Website and our sales and marketing tools. Our Microsoft 365 workplace (email, calendar, and meetings) is hosted in EU data centers. Some of the other providers supporting our Website and our sales and marketing work may process personal data outside the EU/EEA, in particular in the United States: Webflow and Cloudflare (technical data such as IP addresses), HubSpot (CRM and email data), Stripe (billing and payment data), and, when you activate external content, Calendly and YouTube/Embedly. Transfer safeguards. Every third-country transfer relies on a recognized transfer mechanism: an adequacy decision (including the EU-U.S. Data Privacy Framework, verifiable at dataprivacyframework.gov ), the EU Standard Contractual Clauses (with the UK Addendum or Swiss adaptations where UK or Swiss data protection law applies), or your consent where you actively load external content (Art. 49(1)(a) GDPR), together with transfer impact assessments and supplementary measures where needed. You can request a copy of the safeguards via Section 10.”

Document

Privacy Policy

Captured

2026-09-24

Location

§ 5 (Where your data is processed)

Snapshot SHA-256

3358a67e37bdf014ccc102b809d8c07299f79a4a98baa2e82b2c9a883d97be9b

Informational only, not legal advice. Terms change; verify the source and capture date.