Our commitments as processor
- Instructions: we process client data only on the client's documented instructions, to provide the service.
- Confidentiality: everyone at Techvito with access to client environments is bound by confidentiality.
- Security: we apply the technical and organisational measures described on our security page, including isolation, MFA, encryption and audit logging.
- Sub-processors: we use only the sub-processors listed, under written contracts, and give clients notice of changes.
- Location: client data is stored and processed in the AWS region the client chooses.
- Assistance: we help clients respond to data subject requests and with impact assessments, as needed.
- Breaches: we notify the client without undue delay, and within [48 hours], after becoming aware of a personal data breach affecting their data.
- Deletion: at the end of the contract, we destroy the environment and the client data in it, including backups, and confirm in writing.
- Audit: we make available the information needed to show compliance, and support reasonable audits.
Client responsibilities
- Having a lawful basis and any approvals needed to process the data in TrustBoxx
- Deciding who has access, and approving what leaves the environment
- Pseudonymising data before it is loaded, where appropriate
Request the full agreement
Contact [privacy@trustboxx.com] for a copy of our Data Processing Agreement.