Data Processing Agreement (DPA)

💬 Queries and Resources
1

Hi Retool team and community,

We are in the process of finalizing a Data Processing Agreement (DPA) with Retool and need to clarify an important GDPR-related detail.

Could you confirm:

  1. **Where (which country/countries) does Retool store customer data? **
  2. Is data storage always within the EU, or does Retool also transfer/store data in the United States?
  3. If data is stored outside the EU, what measures are in place to ensure GDPR compliance beyond Standard Contractual Clauses (SCCs)?

This information is critical for ensuring compliance with European data protection regulations, especially for public sector clients.

Looking forward to your response. Thanks in advance!

Best regards,
Malene
b-near a/s

2

Hey @Malene_Raundahl, and welcome to the forum!

Just double checking if had stumbled upon these two pages:

From a quick read:

  • Data storage is always in the US
  • The DPA establishes Controllers and Processors of data as per GDPR estipulations

Hope these docs are helpful!

1 Like