HDH Representation of Guarantees

Business name of the actor	Role in the hosting service (Host/processor of the Host)	HDS certified	SecNumCloud 3.2 qualified	Hosting activities in which the player is involved	Access to personal health data from countries outside the European Economic Area, by the Host or one of its processors (Requirement No 29 of the HDS framework)	Host or processor subject to a risk of access to personal health data from countries outside the European Economic Area, imposed by the legislation of a third country in breach of EU law (Requirement no 30 of the HDS framework)
Extra Horizon	Host	Yes	No	1,2,3,4,5,6	No, no access to data from a country outside the European Economic Area	No
Amazon Web Services (AWS)	Procesor	Yes	No	1,2,3,4,5,6	Yes, covered by an adequacy decision within the meaning of Article 45 of the GDPR: US	No, Extra Horizon engages only subprocessors that participate in the EU-U.S. Data Privacy Framework, which provides an adequacy mechanism under Article 45 of the GDPR.
MongoDB	Processor	Yes	No	4,5,6	Yes, covered by an adequacy decision within the meaning of Article 45 of the GDPR: US	No, Extra Horizon engages only subprocessors that participate in the EU-U.S. Data Privacy Framework , which provides an adequacy mechanism under Article 45 of the GDPR.