Language:
PRODUCTS▾
Home Core Serverless Edition Why It’s Different CDS — Constitutional Screening STFL — Sovereign Transaction Finance Layer Defence 🏰 Verify Security All Gates
MORE▾
ASSURANCE
Execution Rights Capabilities Authoritative Sources Evidence Evidence Registry Fortress Baseline Adversarial Verification Machine Law Evolution
SOLUTIONS
Institutions Jurisdictions Due Diligence
RESOURCES
Facts Press Newsroom FAQ Machine Law — The Book Gate SDK Gamechangers The Sound of Machine Law
COMMERCIAL
Pricing Investors
Quantum Security 🔍 Search Request Access →
gateEUDPF — Transatlantic Data Transfer Gate
// IMMO.QUICK · GATEEUDPF · EU-US DATA PRIVACY FRAMEWORK

No data transfer, without valid certification.

gateEUDPF forensically seals that a data transfer to the US passes four clusters, DPF certification, onward transfer restriction, ombudsperson mechanism, and adequacy status, before personal data leaves the EU. Support for companies with transatlantic data flows, never a replacement for a regulator's own recognition as evidence.

Request Access → See the architecture
In one sentence: gateEUDPF checks every data transfer to the US against the recipient's DPF certification, before the data is physically transmitted.
✓ RELEVANT IF...
  • You transfer personal data from the EU to the US
  • You need to prove the US recipient's certification under the Data Privacy Framework
✕ NOT RELEVANT IF...
  • You expect the EU Commission to automatically recognise the result as an adequacy decision
  • No transfer of personal data to the US is involved
// The problem

An adequacy decision can fall, a certification can lapse.

After Schrems I and II, the legal basis for EU-US data transfers is volatile. gateEUDPF checks the recipient's DPF certification and the current adequacy status at every single transfer, not only once at contract signing.

Adequacy status as its own, daily-current cluster
Should the EU Commission suspend the adequacy decision or the CJEU strike it down, the check must engage immediately, not only at the next contract review.
// Architecture

4 clusters, checked sequentially.

Every cluster is dispositive (material_block_mode: true), a hit blocks bindingly, not merely for documentation.

CLUSTER 1
DPF Certification
Checks whether the US recipient is currently listed in the DPF list maintained by the US Department of Commerce.
dpf_listing_active · certification_valid_until
CLUSTER 2
Onward Transfer Restriction
Checks whether any onward transfer by the US recipient to third parties complies with the DPF principles.
onward_transfer_flag · onward_transfer_compliant
CLUSTER 3
Ombudsperson Mechanism
Checks whether access to the redress mechanism for data subjects under the ombudsperson process is documented.
redress_mechanism_documented
CLUSTER 4
Adequacy Status
Checks daily whether the EU adequacy decision for the Data Privacy Framework is in force and not suspended.
adequacy_decision_active
No case, no doubt
Every cluster returns its own sealed result. A single hit in an active cluster is enough to block the overall action.
// Test results

Two tested scenarios.

All values on this page are fictional test data and serve only to illustrate the gate logic.

Scenario C1C2C3C4 Verdict Latency
Data transfer to a DPF-certified cloud provider, adequacy decision activePASSPASSPASSPASSEUDPF_SEALED334ms
Transfer to a recipient with an expired DPF certificationFAILnot evaluatednot evaluatednot evaluatedBLOCK_DP1_CERTIFICATION_EXPIRED302ms
Cryptographic chain continuation
Every test produces a deterministic receipt_id, an input_snapshot_hash, an HMAC-SHA256 signature, and a merkle_link to the previous receipt. Persistence occurs in the gateEUDPFReceipt entity with a 10-year retention period.
// Clarification

What gateEUDPF is not.

  • Not automatic recognition by the EU Commission or the US Department of Commerce. The gate delivers a cryptographic proof, not an adequacy decision.
  • Not a replacement for standard contractual clauses as an alternative transfer basis. The gate checks the DPF path, not other legal bases.

For companies with transatlantic data flows that want to make transfers provable.

Request Access → access@immoquick.eu
Request Access →