Could you please confirm whether any personal data processed by Cloudfilt CDN/WAF (such as user IP addresses) is transferred to or processed outside the European Union?
If so, do you provide additional safeguards such as Standard Contractual Clauses (SCCs) or rely on an equivalent data protection framework (e.g., EU-U.S. Data Privacy Framework) to ensure GDPR compliance? Thanks in advance for clarifying!

Also, please answer the question regarding a DPA. Thank you so much!