Data processing agreement
=========================

Draft for legal review. Not a final document.
Last updated: 1 September 2026.

Purpose
-------

This agreement governs the processing of personal data we carry out on behalf of the organization that contracts the service, within the terms of service.

Instructions
------------

We process the data only following the documented instructions of the organization, which are those derived from the use of the product and its configuration.

Confidentiality and security
----------------------------

Isolation between organizations is enforced in the database with forced row-level security, and no application role can bypass it.

Credentials are stored with envelope encryption and a rotatable key. Technical logs contain no personal data.

Subprocessors
-------------

The list is published and updated before adding anyone. The organization may object to a new subprocessor.

Assistance and return
---------------------

We assist the organization in serving their end users rights: export and deletion are available from their panel.

When the service ends, the data is deleted. The organization can export it beforehand.