# International Transfer Consent Record

## Transfer Details

| Field | Value |
|-------|-------|
| **Controller** | CloudVault SaaS Inc. |
| **Destination Country** | India |
| **Recipient** | CloudVault India Pvt. Ltd. |
| **Recipient Address** | 100 MG Road, Bengaluru, Karnataka 560001, India |
| **Purpose** | 24/7 customer support ticket handling |
| **Data Categories** | Name, email address, account metadata, support ticket content |
| **Adequacy Decision** | No — India does not have an EU adequacy decision |
| **Appropriate Safeguards** | No — not covered by SCCs or BCRs for this transfer |
| **Transfer Basis** | Explicit consent under Article 49(1)(a) |

## Consent Evidence

| Field | Value |
|-------|-------|
| **Subject ID** | usr_7f3a9b2e-41d8-4c76-b5e3-9a8d1c2f4e60 |
| **Consent Type** | Explicit typed declaration |
| **Typed Statement** | "I consent to the transfer" |
| **Risk Disclosure Version** | SHA-256: a1b2c3d4... |
| **Timestamp** | 2026-03-14T10:30:00Z |
| **IP Address** | 198.51.100.42 |
| **User Agent** | Mozilla/5.0 (Windows NT 10.0; Win64; x64) |

## Risk Disclosure Provided

The data subject was informed of the following risks prior to consenting:

1. India does not have an adequacy decision from the European Commission
2. This transfer is not covered by Standard Contractual Clauses or Binding Corporate Rules
3. Indian data protection law (DPDP Act 2023) may not provide equivalent protections to GDPR
4. Indian government authorities may have different data access powers than EU authorities
5. Judicial remedies available in India may differ from EU remedies
6. Consent can be withdrawn at any time in Settings > Privacy > Data Transfers

## Sign-Off

| Role | Name | Date |
|------|------|------|
| DPO | Marta Kowalski | 2026-03-14 |