# International Data Protection Frameworks · AI+ Pro > How AI+ Pro aligns with the GDPR, the UK GDPR and other international data protection frameworks, covering transfer, retention and data subject rights. Canonical: https://aiplus.pro/legal/international Last updated 17 August 2026 ## International Law Compliance How AI+ Pro aligns with the international data protection and AI frameworks that govern our customers, from the GDPR and the EU AI Act to CCPA/CPRA and the mechanisms behind cross-border transfers. Jump to a section GDPR Compliance (European Union) On this page 1. [GDPR Compliance (European Union)](#gdpr) 2. [EU AI Act Readiness](#eu-ai-act) 3. [CCPA/CPRA Compliance (California, USA)](#ccpa) 4. [Cross-Border Data Transfer Mechanisms](#cross-border-transfers) 5. [International Standards](#standards) 6. [Regional Data Protection Laws](#regional-laws) 7. [International Compliance Contacts](#contact) ## Key points A plain-language summary. The full text below is what applies. [GDPR](#gdpr) Lawful basis established, data subject rights implemented, DPIAs run, and EU-US Data Privacy Framework certification in place. [EU AI Act](#eu-ai-act) Risk categorization, transparency obligations, human oversight and conformity assessments prepared. [California](#ccpa) CCPA/CPRA consumer rights requests honored, opt-out mechanisms available and annual privacy audits conducted. [Transfers](#cross-border-transfers) SCCs, adequacy decisions, Binding Corporate Rules, APEC CBPR and transfer impact assessments. [Standards](#standards) Designed against ISO/IEC 27001, 27701, 27017 and 27018. None yet certified, and no SOC 2 audit has been performed. [Elsewhere](#regional-laws) Ten further national regimes across Asia-Pacific, the Americas, the UK, Switzerland and the DIFC. ## GDPR Compliance (European Union)[](#gdpr) AI+ Pro is fully compliant with the General Data Protection Regulation (GDPR), ensuring the highest standards of data protection for EU citizens. - Lawful basis for processing established - Data subject rights fully implemented - Privacy by design and by default - Data Protection Impact Assessments (DPIA) - EU-US Data Privacy Framework certified - Standard Contractual Clauses (SCCs) in place ## EU AI Act Readiness[](#eu-ai-act) We are prepared for the EU AI Act requirements, implementing risk-based approaches and ensuring transparent AI operations. - Risk categorization of AI systems - Transparency obligations fulfilled - Human oversight mechanisms - Accuracy and robustness measures - Conformity assessments prepared ## CCPA/CPRA Compliance (California, USA)[](#ccpa) Full compliance with California Consumer Privacy Act and California Privacy Rights Act, protecting the privacy rights of California residents. - Consumer rights requests honored - Opt-out mechanisms available - Privacy notices updated - Data minimization practices - Annual privacy audits conducted ## Cross-Border Data Transfer Mechanisms[](#cross-border-transfers) We employ multiple legal mechanisms to ensure lawful international data transfers: - Standard Contractual Clauses (EU) - Adequacy decisions compliance - Binding Corporate Rules (BCRs) - APEC Cross-Border Privacy Rules (CBPR) - Transfer Impact Assessments ## International Standards[](#standards) AI+ Pro is built against recognised information-security and privacy management standards. We publish the controls rather than a certificate: certification names an audit an external body performed, and we list only findings we can produce on request. Standards the platform is designed against Standard Scope Status ISO/IEC 27001 Information security management Designed against; not yet certified ISO/IEC 27701 Privacy information management Designed against; not yet certified ISO/IEC 27017 Cloud security controls Designed against; not yet certified ISO/IEC 27018 Processing of personal data in the cloud Designed against; not yet certified SOC 2 Type II Trust services criteria Not yet audited The technical controls behind these — encryption in transit and at rest, role-based access, audit logging, tenant and deployment isolation, and the retrieval boundary that limits what any model receives — are described on [Security](https://aiplus.pro/security) and [Deployment](https://aiplus.pro/deployment) . Where a customer requires certified assurance today, the on-premise and isolated-tenant deployments place the platform inside the customer's own certified environment. ## Regional Data Protection Laws[](#regional-laws) In short Beyond the EU, California and Singapore, the platform is operated to comply with the national data protection laws listed below. We comply with data protection laws across multiple jurisdictions: Regional data protection laws we comply with, by region Region Jurisdiction Law Asia-Pacific Australia Privacy Act Asia-Pacific Japan APPI Asia-Pacific South Korea PIPA Asia-Pacific India DPDP Act Asia-Pacific China PIPL Americas & others Canada PIPEDA Americas & others Brazil LGPD Americas & others United Kingdom UK GDPR Americas & others Switzerland nFADP Americas & others Dubai DIFC Data Protection Law ## International Compliance Contacts[](#contact) EU Representative [contact@aiplus.pro](mailto:contact@aiplus.pro) — Dublin, Ireland UK Representative [contact@aiplus.pro](mailto:contact@aiplus.pro) — London, United Kingdom Global Data Protection Officer [contact@aiplus.pro](mailto:contact@aiplus.pro) ## Related documents - [Privacy Policy What personal data we collect, why we collect it, how long we keep it and the rights you hold over it.](https://aiplus.pro/privacy-policy) - [Terms of Service The agreement that governs your use of the AI+ Pro platform, including payment, conduct and liability.](https://aiplus.pro/terms-of-service) - [Singapore Law Compliance How the platform aligns with the PDPA, the Model AI Governance Framework and the Cybersecurity Act.](https://aiplus.pro/legal/singapore) - [International Law Compliance GDPR, the EU AI Act, CCPA/CPRA, cross-border transfer mechanisms and the standards we certify against.](https://aiplus.pro/legal/international) Last updated 17 August 2026