Legal  /  Data Transfer Impact Assessment

This Data Transfer Impact Assessment (“DTIA”) summary describes the safeguards MyChatBot applies to international transfers of personal data, to help customers meet their own transfer-assessment obligations under the GDPR and similar laws.

1. Transfers we make

To provide the Service we may transfer personal data from the EEA, UK, and Switzerland to the United States and to subprocessors located in various regions. Our Subprocessors page identifies these providers.

2. Legal mechanisms

We rely on the Standard Contractual Clauses, the UK International Data Transfer Addendum, and the EU, US Data Privacy Framework as appropriate, supplemented by the technical and organizational measures described below.

3. Assessment of the destination

We have assessed the legal regimes of the destination countries, including the potential for government access to data. Based on the nature of the data processed, the safeguards in place, and our records of access requests, we consider the residual risk to be low for the categories of data processed through the Service.

4. Supplementary measures

• Encryption of data in transit and at rest.
• Access controls, least-privilege access, and strong authentication.
• Pseudonymization and minimization where feasible.
• A policy of challenging overbroad or unlawful government requests and, where permitted, notifying affected customers.
• Publication of transparency information about any requests we receive.

5. Review

We review this assessment periodically and when relevant circumstances change. Questions can be sent to team@mychatbot.app.