We have the following security questions as a SAAS customer:
Which countries does the vendor Broadcom access our data from?
Does any of the personal data of EEA/European Union citizens/data subjects ever leave the EEA/European Union (e.g. is transferred to the U.S. or other countries data center(s))? This important as there are GDPR laws we have to comply to.