The policy discloses that Personal Information may be transferred to and processed in countries with different or less protective data protection laws, and states that Greenhouse will use lawful transfer mechanisms and contractual restrictions to maintain protections.
This analysis describes what Greenhouse's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes Greenhouse's general commitment to lawful transfer mechanisms for international data flows, which in practice is supplemented by the DPF certification described elsewhere in the policy; the provision does not enumerate specific transfer mechanisms beyond the DPF program, leaving the operational implementation to be confirmed through the Data Processing Addendum.
Interpretive note: The provision does not enumerate specific transfer mechanisms beyond DPF certification, and the availability of standard contractual clauses or other mechanisms as alternatives is not stated in this policy.
Under this clause, Personal Information collected from users in any jurisdiction may be transferred to the United States or other countries for processing. Greenhouse states it applies lawful transfer mechanisms and contractual restrictions, with DPF certification serving as the primary stated mechanism for EU, UK, and Swiss data.
Cross-platform context
See how other platforms handle International Data Transfers and Transfer Mechanisms and similar clauses.
Compare across platforms →"Your Personal Information may be transferred to, and processed in, countries other than the country in which you are resident. These countries may have data protection laws that are different to the laws of your country (and, in some cases, may not be as protective). In any case, Greenhouse will take sufficient measures to ensure protections are applied through the use of lawful transfer mechanisms and contractual restrictions.Excerpt from Greenhouse's Privacy Policy
1.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes Greenhouse's general commitment to lawful transfer mechanisms for international data flows, which in practice is supplemented by the DPF certification described elsewhere in the policy; the provision does not enumerate specific transfer mechanisms beyond the DPF program, leaving the operational implementation to be confirmed through the Data Processing Addendum.
Under this clause, Personal Information collected from users in any jurisdiction may be transferred to the United States or other countries for processing. Greenhouse states it applies lawful transfer mechanisms and contractual restrictions, with DPF certification serving as the primary stated mechanism for EU, UK, and Swiss data.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Greenhouse.