International Transfer Position Statement

Overview

ReviveAI Ltd is a UK-based Data Processor.

Primary Position

All production infrastructure is hosted exclusively within the United Kingdom via: • Microsoft Azure • UK South (London) • UK West (Cardiff)

ReviveAI does not routinely transfer personal data outside the UK unless in certain, specific circumstances detailed below.

Potential Transfer Scenarios

International transfers may occur only where: • A client elects to deploy messaging services whose infrastructure includes EEA or US routing; or • A communication platform inherently processes metadata in global infrastructure.

Such transfers are limited to what is technically necessary for message delivery.

Safeguards (Where Applicable)

Where international transfers occur, ReviveAI ensures one of the following safeguards is in place: • UK International Data Transfer Agreement (IDTA) • UK Addendum to EU Standard Contractual Clauses (SCCs) • Adequacy Regulation (where applicable)

ReviveAI does not:

• Sell personal data • Share personal data between clients • Use personal data for model training • Perform behavioural profiling beyond Controller instruction

Data Minimisation

• Processing is instruction-based • AI inference is session-bound • No long-term cross-border analytics enrichment