Where data goes
Our team works from India, Malaysia, the United States and Australia, and our providers operate globally (see Sub-processors).
Safeguards
- Transfers from the EEA use the European Commission's Standard Contractual Clauses (2021), with a transfer impact assessment.
- Transfers from the UK use the UK International Data Transfer Addendum to those clauses.
- Transfers to US providers certified under the EU–US Data Privacy Framework (and the UK Extension) may rely on that certification.
- Supplementary measures: encryption in transit, access limited to named staff, and no client confidential data in public AI tools.
A copy of the relevant safeguards is available from privacy@mrooi.com.