While Socrative is owned and operated in Canada, data is stored in secure servers in the US using Amazon Web Services. Amazon is ISO 27001, 27017, and 27018 certified. For more information on Amazon's compliance programs, click here.
There is no obligation under the GDPR for personal data to be stored in the EU, and it is permissible for the data to be transferred internationally as long as it is adequately protected.
AWS's primary data storage is in the US and all Socrative account information is solely stored in the US. AWS has temporary backup servers located in Canada, Australia, South America (San Paolo, Brazil), and Asia (Mumbai, India; Seoul, South Korea; Singapore; and Tokyo, Japan) where non personally-identifiable assignment data could be stored.
As a result of the Schrems II ruling, Showbie and all sub-processors now rely on Standard Contractual Clauses for the safeguard of data transferred outside of the EU.
If you have questions about the storage or transfer of Socrative's data, please contact us at firstname.lastname@example.org.