What happens when my EDC or safety database provider has servers outside the EU?

“Using a cloud-based system with infrastructure or support teams in non-EEA countries creates a cross-border data transfer under GDPR. This requires appropriate transfer mechanisms, typically Standard Contractual Clauses plus a Transfer Impact Assessment. Where ethics committees are not satisfied with the provider's setup, we design hosted alternatives where we control the environment and keep data within the EEA.”