Purpose

This agreement governs the processing of personal data we carry out on behalf of the organization that contracts the service, within the terms of service.

Instructions

We process the data only following the documented instructions of the organization, which are those derived from the use of the product and its configuration.

Confidentiality and security

Isolation between organizations is enforced in the database with forced row-level security, and no application role can bypass it.

Credentials are stored with envelope encryption and a rotatable key. Technical logs contain no personal data.

Subprocessors

The list is published and updated before adding anyone. The organization may object to a new subprocessor.

Assistance and return

We assist the organization in serving their end users rights: export and deletion are available from their panel.

When the service ends, the data is deleted. The organization can export it beforehand.