@nicol Sure, the UK currently benefits from an adequacy decision https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en thanks to the very similar legislation. But it's still a transfer outside the EU/EEA so it requires extra thinking. Why bother, when there's a supplier completely inside the EU/EEA?