The RSI Security web site breaks down the methods in a few detail, but the process in essence goes similar to this: Your company is service supplier centered outside the EU. It offers services to customers outside the house the EU. Its consumers can use its services after they travel https://www.nathanlabsadvisory.com/blog/tag/implementation-guidelines/