All of Onomondo’s sub-processors based outside the EU are certified under the EU-U.S. Data Privacy Framework (DPF), which means no additional transfer mechanism is required. Additionally, Onomondo has entered into EU Standard Contractual Clauses (SCCs) with all sub-processors in third countries. An annual review of each sub-processor’s data privacy and security compliance is conducted by Onomondo using a third-party compliance tool.