# How do I request compliance documentation?

**Short answer:** Contact the Data Protection Officer at **dpo@cybercrucible.com**. Available documentation includes Standard Contractual Clauses, the Transfer Risk Assessment, Data Processing Agreements, and the data governance policy — provided subject to reasonable confidentiality measures.

## What you can request

- **Standard Contractual Clauses** — including the SDAIA pre-approved clauses for Saudi transfers.
- **Transfer Risk Assessment** — the completed TRA covering data flows, destination legal regime, controls, and mitigations.
- **Data Processing Agreement** — defining scope of processing, security terms, confidentiality, and breach notification.
- **Data governance and sharing policy** — collection limits, transit protections, and third-party non-sharing commitments.

## What to include in your request

It speeds things up considerably to state your jurisdiction, whether you are acting as controller, which deployment model you are evaluating (air-gapped, regional, or hybrid), and what your own regulator or auditor requires.

## For jurisdictions not covered here

The regimes described in this book are those most frequently asked about. If yours is not listed, the underlying answers are usually the same — minimal collection, local processing, and in-country deployment options. Contact the DPO with the specific requirement and it can be addressed directly.