Data Privacy Framework Statement

Forter, Inc. and its affiliates (“Forter”, “we”, “our” or “us”) have self-certified with the EU-US Data Privacy Frameworks, the UK Extension to the EU-US Data Privacy Framework, and Swiss-US Data Privacy Frameworks, as set forth by the US Department of Commerce regarding the the collection, use, and retention of personal data transferred from the European Union, the United Kingdom and/or Switzerland to the United States, as further described in our certification on the Data Privacy Framework Program website at https://www.dataprivacyframework.gov/s/. Forter has certified that it adheres to the Data Privacy Framework Principles of notice, choice, onward transfer, security, data integrity, access, and enforcement for such personal data.

Scope

Forter provides fraud and trust products and services to businesses globally. Forter’s Data Privacy Framework certification applies to the personal data that these businesses transfer to us from the European Union, the United Kingdom and/or Switzerland for the provision of our services, except where data is transferred to us pursuant to a different adequacy mechanism recognized by the EU Commission and/or the UK Information Commissioner’s Office (e.g. standard contractual clauses). Forter will comply with the Data Privacy Framework Principles agreed to by the U.S. Department of Commerce and the European Commission in respect of such personal data. To learn more about the Data Privacy Framework Program, view a list of entities who have current certifications under the Data Privacy Framework, or view our certification, please visit https://www.dataprivacyframework.gov/s/.

Third Party Sub-processors

Forter uses third party sub-processors to help us provide our services and those sub-processors may process personal data on our behalf. Forter conducts due diligence on all of its sub-processors to ensure adequate protection of the data shared with such sub-processors, and remains responsible and liable under the Data Privacy Framework Principles for our third party sub-processors as set forth in the Data Privacy Framework Principles.

Inquiries, Complaints and your Rights

If you have any questions about this Data Privacy Framework Statement or wish to make a complaint, we encourage you to contact us at [email protected]. For any complaints that cannot be resolved with Forter directly, Forter has chosen to cooperate, for the purposes of the EU-US, UK-US and Swiss-US Data Privacy Frameworks, with the JAMS Data Privacy Framework Program. Information on how to contact JAMS is available at https://www.jamsadr.com/eu-us-data-privacy-framework. Under certain conditions, as further explained in the Data Privacy Framework Principles, you may be entitled to invoke binding arbitration when other dispute resolution procedures have been exhausted, but prior to initiating such arbitration, you must: (1) contact Forter and afford us the opportunity to resolve the issue; (2) seek assistance from Forter’s designated independent recourse mechanism above; and (3) contact the U.S. Department of Commerce (either directly or through a European Data Protection Authority, the UK ICO or the Swiss Federal Data Protection and Information Commissioner) and afford the Department of Commerce time to attempt to resolve the issue. Forter is subject to the investigatory and enforcement powers of the US Federal Trade Commission (FTC).

Individuals located in certain countries, including in the EEA, UK and Switzerland, have certain statutory rights with respect to their personal data, including the right to access the personal data we hold about you; correct any personal data we hold about you that may be inaccurate; request that we delete your personal data (subject to certain limitations); in certain circumstances, restrict or object to us processing your personal data; transfer your personal data to another organization (subject to certain conditions); and withdraw your consent to us processing your personal data, where consent was previously provided and was the legal basis on which we relied for our processing of your personal data. If you wish to exercise any of the aforementioned rights, please contact us at [email protected]. We will respond within the timeframes required under applicable law. When handling your request, we may need to request additional information from you (which may include personal data) to help us confirm your identity. This is a security measure to ensure that your personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response. Please note that if you do not provide us with this additional information, we may be unable to process your request.

Under certain circumstances, Forter may be required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

Last updated: July 17, 2023