We process personal data of your employees as a processor under Article 28 GDPR, on your instructions, under the DPA. For transfers outside the EEA and UK we rely on the EU Standard Contractual Clauses and the UK International Data Transfer Addendum, with a transfer impact assessment available on request.
Enterprise customers can keep all storage, processing and inference in the EU. See Where is my data stored?.
We support data protection impact assessments with a completed template describing the processing, the risks and the controls. Our contact for supervisory authorities and data subjects is adharsh@20xwork.ai.