Data processing agreement
Scope and roles
TODO(owner): the customer as controller of the mail its inboxes receive, Waridex as processor, and how this agreement relates to the terms of service.
Details of the processing
TODO(owner): subject matter, duration, nature and purpose of the processing, the types of personal data and the categories of data subjects.
Subprocessors
Waridex uses these subprocessors:
| Subprocessor | Purpose | Location |
|---|---|---|
| Microsoft Azure, including Microsoft Entra External ID | hosting, storage of received mail, dashboard sign-in | TODO(owner) |
| Stripe | payments and billing | TODO(owner) |
| Cloudflare | cookieless web analytics for waridex.com (Cloudflare Web Analytics) | TODO(owner) |
| TODO(owner): the mail provider | the company mailboxes at waridex.com (support, security, privacy) | TODO(owner) |
TODO(owner): how customers are told about a new subprocessor and how they can object.
Security measures
TODO(owner): the technical and organisational measures.
International transfers
TODO(owner): transfers outside the EEA and the safeguards that cover them.
Assistance, audits and breach notification
TODO(owner): help with data subject requests, audits, and how and when a personal data breach is reported.
Deletion and return
TODO(owner): deletion of the customer’s data at the end of the service, and retention by plan in the meantime.