While Showbie is owned and operated in Canada, data is stored in secure servers using Amazon Web Services (AWS). Amazon is ISO 27001, 27017, and 27018 certified. More information about AWS's compliance programs can be found here.
There is no obligation under the GDPR for personal data to be stored in the EU, and it's permissible for the data to be transferred internationally as long as it is adequately protected.
AWS's primary data storage is in the US and all Showbie account information is solely stored in the US. AWS has temporary backup servers located in Canada, Australia, South America (San Paolo, Brazil), and Asia (Mumbai, India; Seoul, South Korea; Singapore; and Tokyo, Japan) where non personally-identifiable assignment data could be stored.
The Standard Contractual Clauses will be employed for any transfer of personal data by AWS or any of its sub-processors to South America, Asia, or Australia.
Both Showbie and AWS are certified under the US Privacy Shield Framework and committed to adhere to these policies which are enforceable under US law.
The EU-U.S. and Swiss-U.S. Privacy Shield Frameworks were designed by the U.S. Department of Commerce and the European Commission and Swiss Administration to provide a method of ensuring offers an acceptable level of data protection, by requiring that they certify according to the requirements of the Framework.
See Showbie's Privacy Shield Certification here.
If you have questions about the storage or transfer of Showbie's data, please contact firstname.lastname@example.org.