Q: GDPR & LGPD — Data Processing, Servers & DPA
Hello,
I operate in the EU and Brazil. I know Quizify stores quiz answers on your servers, so you act as a processor and I’m the controller (GDPR Art. 4).
Please confirm:
1. Where are your servers located?
2. Do you offer a DPA?
3. If outside EU/EEA, do you use SCCs or adequacy decision for legal transfer?
4. Do you have details for LGPD (Brazil) about your role and storage?
I need this to ensure full GDPR/LGPD compliance.
Thanks!
Kushal_Quizify
Jul 1, 2025A: Thank you for your questions — you're absolutely right that under GDPR and LGPD, you are the Data Controller and we act as the Data Processor. Here are the key details:
Server Location: All data is securely stored on servers located in India.
DPA: Yes, we offer a Data Processing Agreement upon request and will soon make it available on our website.
International Transfers: For EU/EEA users, we rely on Standard Contractual Clauses (SCCs) to ensure lawful data transfers.
LGPD (Brazil): Under LGPD, we act as a Data Operator (Processor) and follow similar data handling practices aligned with the regulation.
We're also preparing a compliance page with all relevant documentation and data handling details.