Data Processing Transfer to Japan

Notice: Data Processing Transfer to Japan

1. International Data Transfer Notice

   You acknowledge that Japan has different data-protection standards than your current region. We strive to ensure a comparable level of protection through established legal safeguards:

   • EU-Japan & UK-Japan Frameworks: For customers in Europe and the UK, we rely on the Mutual Adequacy Decisions established between the EU/UK and Japan, supplemented by Standard Contractual Clauses (SCCs), where applicable.
   • Latin American Safeguards: For Brazil, we rely on the mandatory ANPD Standard Contractual Clauses. For Argentina, Colombia, and Mexico, there are equivalent contractual safeguards, cross-border model clauses, or regulatory authorization mechanisms.
   • APAC Compliance: For Singapore, Australia, South Korea, and India, we maintain personal-information-protection systems or legally binding agreements that mandate standards equivalent to your local laws (e.g., APPI, PDPA, Privacy Act, PIPA, and DPDP Act).
   • North America: For the US and Canada, you acknowledge that your data will be transferred to Japan and might be subject to lawful access requests by Japanese authorities under local law.

2. Sensitive & Medical Data Warranty

   If your data contain special category/sensitive information (such as health or medical records), you represent and warrant that:

   • You have obtained explicit, informed, and unambiguous consent from the individual data subjects for this international transfer, as required by GDPR Article 9, India's DPDP Act, and Colombia's Statutory Law 1581.
   • The data are not subject to local residency mandates (e.g., Australia’s My Health Records Act) that strictly prohibit offshore storage.
   • You acknowledge that Japanese laws (e.g., the Act on the Protection of Personal Information) govern data handling, and local, public authorities might access data under strict, legal warrants.

3. Accountability

   Automation Anywhere remains responsible for striving to ensure all sub-processors in Japan adhere to these established protection standards. You may withdraw this instruction at any time, though this will require you to delete this model connection and create a new one to another supported region.

4. Authorized Sub-processors

   Your data will be hosted by our regional partner:

   Model Name	Sub-processor	Processing Locations
   GPT-4o	Microsoft Azure	Japan
   Claude Sonnet 4.5	AWS	Japan