Aiven Data Processor Agreement

NAV has, based on the Schrems II verdict that invalidated The EU-US Privacy Shield transfer mechanism, decided that all cloud services and all storage of data in cloud services shall take place in the EU / EEA. Support is to be given from Aiven supportcenters in EU/EØS. This is already the case regarding Kafka service at Aiven, so the DPA between NAV and Aiven is still valid.

Other relevant documents:

• Risk analysis related to the Kafka service and underlying platform