Scope and duration
Data is processed on customer instructions to provide email security during the agreement. Categories of data and data subjects depend on the service scope.
DATA PROCESSING ADDENDUM
Clear responsibilitiesfor business data.
A framework for processing terms between the customer and provider.
Confidentiality and safeguards
Access controls, audit records and deletion procedures are applied according to the service. Verified security incidents are communicated with their known scope.
Subprocessors and transfers
Subprocessors, data locations, retention and international transfer terms require a contractual schedule before they can be relied upon.
End of service
Return or deletion of data must account for statutory retention and the backup lifecycle, as agreed by the parties.