International data transfers: EU, UK and Switzerland

This article replaces earlier guidance that referenced the EU-U.S. and Swiss-U.S. Privacy Shield frameworks, which were superseded by the Data Privacy Framework. Our certification has transitioned accordingly.

Uva Software, LLC is an active participant in the EU-U.S. Data Privacy Framework (DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, certified for Non-HR Data. Our participation can be verified on the official list at dataprivacyframework.gov.

For customers in the European Union, the European Commission's adequacy decision of 10 July 2023 recognises the DPF as providing adequate protection for personal data transferred to certified US organisations. For customers in the United Kingdom, the UK Government recognised the UK Extension as adequate in the Data Protection (Adequacy) (United States of America) Regulations 2023, in force since 12 October 2023. For customers in Switzerland, the Swiss recognition of the Swiss-U.S. DPF has been in effect since 15 September 2024.

Independently of transfer mechanisms, Scanii offers regional API endpoints, including api-eu1.scanii.com (Ireland) and api-eu2.scanii.com (London), and file contents submitted to a regional endpoint are processed in that region.

For customers who prefer a contractual safeguard alongside adequacy, our Data Processing Addendum incorporates the EU Standard Contractual Clauses (Module 2), and we can execute the ICO's International Data Transfer Addendum on request. Contact support@uvasoftware.com to arrange either.