GDPR Compliance Summary (EU-Only Processing)

EU-Only Processing

GDPR & Compliance Summary

This summary document supplements the Data Processing Agreement (DPA) provided by Apps4.Pro. It highlights GDPR alignment, sub-processor details, data residency, technical and organizational measures (TOMs), retention/deletion practices,
and relevant certifications for customers using the EU-only deployment option.

End-to-End Encryption

EU Data Centers Only

ISO 27001 Certified

1. GDPR Alignment

Apps4.Pro Migration Manager is designed and operated in compliance with the EU General Data Protection Regulation (GDPR). The EU-only deployment option ensures that all customer data is processed exclusively within EU regions.

No transfers of personal data outside the EU/EEA

2. Sub-Processor List

Sub-Processor

Purpose

Location

Certifications

Microsoft Azure (Microsoft Corporation)

Hosting & Storage Infrastructure

West Europe / North Europe (EU)

ISO 27001

SOC 2

GDPR

CSA

STAR

3. Data Residency & Data Flows

All data processed by Apps4.Pro Migration Manager under the EU-only option is hosted and processed exclusively within Microsoft Azure EU datacenters (West Europe / North Europe). No cross-border data transfers occur under this arrangement.

4. Technical and Organizational Measures (TOMs)

Encryption in transit (TLS 1.2+) and at rest (AES-256, Azure Storage Encryption)

Role-Based Access Controls (RBAC) with least privilege principle

Multi-Factor Authentication (MFA) for administrative access

Audit logging of system access and activity

Regular vulnerability management and patching

Hosted on Microsoft Azure EU datacenters with physical and network security controls

Employee confidentiality agreements and mandatory security training

5. Retention & Deletion Policy

Apps4.Pro does not permanently store customer data.

Temporary cache/logs are created only to facilitate migration.

Data is purged immediately upon completion of the project or earlier upon customer request.

No archival or backup copies are retained.

Certifications & References

Apps4.Pro leverages Microsoft Azure as its infrastructure provider. Azure maintains multiple global
certifications, including:

ISO 27001

Information Security Management

SOC 2 Type II

Security & Availability Controls

GDPR compliance

EU Data Protection Regulation

CSA STAR

Cloud Security
Alliance

🔗 More details: https://learn.microsoft.com/en-us/compliance/regulatory/offering-home

This compliance summary should be reviewed together with the Apps4.Pro Data Processing Agreement (DPA). Together, they provide a comprehensive overview of GDPR compliance, security practices, and customer data protections for EU-only processing deployments.