User data for the SQE products is hosted on an Amazon Web Services (AWS) server located in the United States. OUP has a contractual agreement with Amazon for this purpose that covers data protection globally and is in compliance with UK GDPR.
More information on the scope of AWS cloud security can be found here, in the UK GDPR section.
OUP directs AWS on where and when data is stored and managed; there is a DPA in place with AWS for this purpose.
These two public releases (1) (2) explain how the AWS DPA complies with GDPR, including for transfers to countries who have not received an adequacy decision (like the US).
Have further questions? Contact Us