Your personal data may be transferred from the EU or other countries to Israel and the United States, where AI21 operates its main systems. AI21 says it uses standard contractual clauses (SCCs) to make these transfers legal under GDPR.
If you are in the EU, your personal data will be transferred to Israel and the US for processing — AI21 relies on SCCs for these transfers, but you have limited practical ability to prevent this if you use their services.
Cross-platform context
See how other platforms handle Cross-Border Data Transfers and similar clauses.
Compare across platforms →Data transferred to the United States faces ongoing legal uncertainty following the Schrems II ruling, and while Israel has EU adequacy status, US transfers require SCCs supplemented by Transfer Impact Assessments to be fully compliant.
(1) REGULATORY FRAMEWORK: GDPR Chapter V (Arts. 44-49) governs cross-border data transfers and requires an adequacy decision, SCCs, or other appropriate safeguards. Israel holds a European Commission adequacy decision (renewed consideration ongoing post-2023). US transfers require SCCs plus a Transfer Impact Assessment (TIA) per EDPB guidance following Schrems II (C-311/18). UK GDPR and ICO's International Data Transfer Agreement (IDTA) govern UK-origin transfers separately. Israeli transfers to the US are subject to Israeli PPA requirements. (2)
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.