If you are in the EU or UK, Okta may transfer your personal data to the United States or other countries, and it protects this transfer using legally approved Standard Contractual Clauses.
This analysis describes what Auth0's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The provision establishes the operational framework for Auth0's global data transfer practices and specifies the contractual mechanisms used to comply with international data protection requirements. This addresses the legal requirements governing cross-border personal data movement under frameworks like GDPR and similar regulations.
Your personal data collected on okta.com may be transferred to and processed in the United States under Standard Contractual Clauses, which provide legal protection but subject your data to US surveillance laws including FISA Section 702.
Cross-platform context
See how other platforms handle International Data Transfers and similar clauses.
Compare across platforms →"Okta operates globally and may transfer your personal data to countries outside of your home country, including the United States, which may not provide the same level of data protection as your home country. Where required by applicable law, we use Standard Contractual Clauses or other appropriate safeguards to protect your personal data during international transfers.Excerpt from Auth0's Privacy Policy
(1) REGULATORY FRAMEWORK: This provision implicates GDPR Chapter V (Arts.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The provision establishes the operational framework for Auth0's global data transfer practices and specifies the contractual mechanisms used to comply with international data protection requirements. This addresses the legal requirements governing cross-border personal data movement under frameworks like GDPR and similar regulations.
Your personal data collected on okta.com may be transferred to and processed in the United States under Standard Contractual Clauses, which provide legal protection but subject your data to US surveillance laws including FISA Section 702.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Auth0.