Our data processing agreement (DPA) forms part of every customer contract. It sets out how we process personal data on your behalf when you use CloudVision360 and ITOps360. To request a countersigned copy, e-mail privacy@cloudvision360.com.
Summary
- Roles. You are the controller; we are the processor of personal data in Customer Data.
- Instructions. We process personal data only on your documented instructions, including your product configuration.
- Confidentiality. Our personnel are bound by confidentiality obligations.
- Security. We implement the technical and organizational measures described in the Trust Center, including tenant isolation, encryption and access control.
- Subprocessors. We use the subprocessors listed in the Trust Center, give notice before adding new ones, and let you object.
- Assistance. We help you respond to data subject requests and with data protection impact assessments.
- Breach notification. We notify you without undue delay, and in any case within 48 hours, after becoming aware of a personal data breach affecting your data.
- Deletion. At the end of the contract we delete or return personal data, except where the law requires retention.
- Audits. We make available the information needed to demonstrate compliance, including third-party reports once available.
- Transfers. International transfers use appropriate safeguards such as standard contractual clauses.