Data processing agreement

This agreement applies when we process personal data on behalf of a customer while providing the service. It forms part of the terms of service. The parties' details are to be confirmed at launch.

1. Roles

The customer is the controller of the personal data in its workspaces. We are the processor and act only on the customer's documented instructions, which are the terms, this agreement and the customer's use of the service.

2. What we process

• Data subjects: the customer's members, guests and clients, and people mentioned in content.
• Data: account details and any content added to the service, including messages, files, recordings and transcripts.
• Purpose: providing, securing and supporting the service.

3. Our commitments

• Keep the data confidential and limit access to staff who need it.
• Apply appropriate technical and organisational security measures, including keeping each workspace's data separate from every other workspace.
• Help the customer answer requests from data subjects and meet its own legal duties.
• Tell the customer without undue delay about a personal data breach.

4. Sub-processors

The customer allows the use of the sub-processors on the sub-processors page. We will announce new sub-processors in advance so the customer can object.

5. Transfers

Data is hosted in the EU. Transfers outside the EU are protected by standard contractual clauses or another valid safeguard.

6. End of the service

When the service ends, the customer can export its content. We then delete it within a period to be confirmed at launch, unless the law requires us to keep it.

7. Audits

We make available the information needed to show compliance with this agreement. Details of audits are to be confirmed at launch.