GDPR and the CLOUD Act in feedback software
GDPR and the CLOUD Act in feedback software
EU hosting matters, but is not the entire privacy assessment. Review legal control, subprocessors, international access and contracts when choosing feedback software.
What does GDPR require?
Feedback may contain personal data, including open answers and identifiable small groups. Define the purpose, legal basis, data needed, access and retention. Inform participants and review the processing agreement and transfers outside the EEA.
What does the CLOUD Act change?
Providers subject to US jurisdiction may be required to produce data in their possession, custody or control, even if stored abroad. This does not make every request valid. GDPR Article 48 addresses requests from third-country authorities; a request alone is not a general legal basis for transfer.
Questions for your supplier
Check storage, backups, support access, subprocessors and applicable jurisdictions together with contractual and technical safeguards. Ask GrowPromoter for current processing, hosting and subprocessor information. This page is general information, not legal advice or a guarantee against government requests.
