As part of our supplier engagement process, cloud service providers are evaluated from a legal and data protection perspective by specialist teams, to understand where data will be stored, what security arrangements for personal information are provided, and what contractual controls apply.