Security and compliance
Health data hosting: transfer declaration
Beyond Work publishes this declaration under Requirement 31 of the HDS v2.0 framework, which requires hosting providers to make public the mapping of transfers of personal health data outside the European Economic Area, together with any remote access under Requirement 29 and the risks of unauthorised access under Requirement 30.
Business name of the actor
Beyond Work Holdings, Inc. (United States) · Beyond Work UK Limited (United Kingdom) · BEYOND WORK, SASU (France)
Role in the hosting service
Processor
HDS certified
No
SecNumCloud 3.2 qualified
No
Hosting activities in which the actor is involved
Activities 3 and 4 (Platform). Activity 5 (Support and Forward Deployed Engineers).
Access to personal health data from countries outside the EEA, by the host or one of its processors (Requirement 29)
No access to data from a country outside the European Economic Area. Country covered by an adequacy decision under Article 45 GDPR: not applicable. Country not covered by an adequacy decision under Article 45 GDPR: not applicable.
Host or processor subject to a risk of access to personal health data from countries outside the EEA, imposed by the legislation of a third country in breach of EU law (Requirement 30)
Yes. United States, through our infrastructure provider Amazon Web Services.