Data processing agreement

The agreement defines processing obligations for business customers.

The customer acts as data controller. Trigvanta acts as data processor.

We only process your data as this agreement and your contract with us permit.

See the Privacy policy data table for exactly what we collect and why.

Users and operators connected to the customer's workspaces.

Security, operations, compliance and delivery of the platform service.

Access control, audit logging, encryption controls and recovery controls.

See the Subprocessors page for the full, up-to-date list of who we work with and why.

Transfers are governed by configured legal mechanisms (e.g. EU Standard Contractual Clauses) where required.

Rights requests are handled through the privacy flows.

Security incidents follow our incident and notification procedures.

Return/deletion of data follows retention requirements and legal requirements.

Processing and security activities are auditable.

order@trigvanta.com