Statement: ''Padlet is subscribed to the EU-US Data Privacy Framework (DPF) under Wallwisher, Inc. as a transfer mechanism.''

https://legal.padlet.com/dpa#standard-contractual-clauses

They are incorporated into the DPA

Statement from the vendor regarding transfer impact assessment: "We have conducted a TIA with an external EU-based privacy and data protection consulting firm. However, at this moment, we share the TIA with supervisory authorities only (according to clause 14d of the SCCs)."

Further statement when asked about providing a summary: "We have included all the relevant details for a TIA in the appendix sections of our DPA. We also publicly publish our list of subprocessors at https://legal.padlet.com/subprocessors. We are SOC 2 compliant, so we have been audited by a third party for strict adherence to the security controls listed under SOC 2. That includes having well-defined policies for information security, data breach response, and acceptable use policy to name a few. All our assets have been audited to ensure that we encrypt them at rest and in transit using industry-standard security protocols."