Business name of the actor

Role in
the hosting service
(Host/processor
of the host)

HDS certified (Yes/ No/ Exempted)

SecNumCloud 3.2 qualified

Hosting activities in which the player is involved

Access to personal health data from countries outside the European Economic Area, by the Host or one of its processors

Host or processor subject to a risk of access to personal health data from outside the European Economic Area, imposed by the legislation of a third country in breach of EU law

Zoho Creator

☑ Host

☑ Processor

◻ Yes

☑ No

◻ Exempted

◻ Yes, no risk of unauthorized access to data covered by HDS framework requirement 30

☑ No

1. Provision and maintenance in operational condition of physical sites to host the physical infrastructure of the information system used for processing health data;

2. Provision and maintenance in operational condition of the physical infrastructure of the information system used for processing health data;

3. Provision and maintenance in operational condition of the information system’s application hosting platform;

4. Provision and maintenance in operational condition of the virtual infrastructure of the information system used for processing health data;

5. Administration and operation of the information system containing the Personal Health Data;

☑ Yes

◻ No, no access to data from a country outside the European Economic Area

If yes, specify the country concerned:
INDIA
Transfer of Personal Health Data from EEA to India is not covered by adequacy decision within the meaning of Article 45 of GDPR.

To govern this transfer, implemented and documented appropriate safeguards such as Standard Contractual Clauses within the meaning of Article 46 of GDPR.

☑ Yes

◻ No

If yes, specify the country concerned: INDIA

Transfer impact assessment conducted in accordance with Article 46 of GDPR shall be shared upon request as specified in the contract

Sub-processor (Google Cloud Translation)

◻ Host

☑ Processor

☑ Yes

◻ No

◻ Exempted

◻ Yes, no risk of unauthorized access to data covered by HDS framework requirement 30

☑ No

Activities 1 to 5, please refer to HDS external page for more information

◻ Yes

☑ No

Details of sub-processors, the types of data they process, and their processing locations are listed on the sub-processors page

◻ Yes

☑ No