International processing and transfer review
Understand where the service processes information and prepare the actual parties and safeguards for your arrangement.
Processing locations and roles
Attriboo is operated by SEO RANK SERP LLC in the United States. The primary Supabase database and physical backups are in US East; the configured application function region is Vercel iad1. Global delivery, support, operational logs and provider access need their own review. These facts do not establish EU-only residency.
Attriboo generally acts as processor or subprocessor for instructed customer website analytics and payment attribution. Account administration, billing, security and support also involve separate controller activities. See the provider list and general DPA.
Prepare your workspace review
- A workspace owner opens Agreements and transfer review, enters the actual legal customer details and explicitly accepts the general DPA.
- Choose EEA, UK, both or another/uncertain scope, then request review and download the draft preparation package.
- Verify the parties, roles, applicable instrument, destination-law and safeguards assessment, required annexes/tables and authorized acceptance before an affected restricted transfer.
The general DPA receipt proves the recorded action for that version. A pending request or draft package does not execute SCCs, a UK addendum or a transfer assessment. Attriboo does not claim its own Data Privacy Framework certification. A hosting provider's agreement does not establish the customer-to-Attriboo arrangement.
Use the applicable official instrument
The Commission's SCC questions and answers explain role selection, annexes and limitations, including importer territorial scope. Use the official 2021 SCC text without rewriting its mandatory clauses when that instrument applies. A controller/exporter may need Module Two; a processor/exporter may need Module Three. Confirm applicability for the actual processing.
For UK transfers, review the ICO's Addendum and IDTA guidance and the official UK Addendum. Complete its tables and mandatory provisions with the actual agreement and assessment. The preparation package leaves unresolved decisions and signatures visibly blank.
Records and questions
Your workspace owner can download the general DPA acceptance and draft preparation from Agreements. Keep exported legal customer information secure. Contact privacy support for the applicable account-specific material and outstanding facts.