International Data Transfers
Last Updated: February 17, 2026
Adminest is based in New Zealand. Some of our sub-processors are located in countries outside the UK and EU. Where personal data is transferred internationally, we ensure appropriate safeguards are in place as required by GDPR Article 44-49 and the UK GDPR.
Transfer Mechanisms
| Processor | Destination | EU Mechanism | UK Mechanism | Notes |
|---|---|---|---|---|
| Auth0 (Okta) | United States | EU SCCs (2021) | UK IDTA Addendum | Identity provider |
| Microsoft Azure | United States (East US) | EU SCCs (Microsoft DPA) | UK IDTA (Microsoft DPA) | Hosting, storage, AI, queuing |
| MongoDB Atlas | United States (East US, Azure) | EU SCCs (MongoDB DPA) | UK IDTA (MongoDB DPA) | Primary database |
| Postmark | United States | EU SCCs (ActiveCampaign DPA) | UK IDTA Addendum | Email delivery |
| Langfuse | Germany (EU) | N/A (EU adequate) | UK adequacy decision | AI observability (no PII) |
| Redis (Azure) | United States (East US) | EU SCCs (Microsoft DPA) | UK IDTA (Microsoft DPA) | Caching, rate limiting (no PII at rest) |
| Google Analytics | United States | EU SCCs (Google Ads DPA) | UK IDTA Addendum | Only with cookie consent |
Safeguards
- Standard Contractual Clauses (SCCs): We use the EU Commission's 2021 SCCs for transfers from the EU/EEA to third countries.
- UK International Data Transfer Agreement (IDTA): For UK personal data, we use the UK IDTA or UK Addendum to the EU SCCs.
- Transfer Impact Assessments: We conduct TIAs for each transfer to evaluate the legal framework of the destination country.
- Encryption: All data is encrypted in transit (TLS 1.2+) and at rest (AES-256).
- Data Minimisation: Only the minimum necessary data is transferred to each sub-processor.
Australian Transfers
Under the Australian Privacy Act 1988 (APP 8), before disclosing personal information to overseas recipients, we take reasonable steps to ensure the recipient complies with the APPs. All our sub-processors have contractual obligations equivalent to the APPs.
Questions
For copies of our SCCs, TIAs, or other transfer documentation, contact privacy@adminest.com.