Do you use appropriate legal mechanisms for all international transfers of personal data?
We use sub-processors to deliver various parts of our service, some of which are outside the UK. We have a signed contract with every sub-processor, each of which includes Standard Contractual Clauses (SCCs) that are sully GDPR compliant and have been approved by the UK Information Commissioner’s Office (ICO).
More information: https://www.commonplace.is/subprocessors