Data Processing Agreement
Purpose and scope
This agreement sets out how Claria handles personal data on behalf of the organization that uses the service, including the content of reports and the data of the people involved.
Roles
The organization decides why and how the data in its reports is used. Claria processes it only to provide the service and on the organization's instructions. The exact legal roles are pending confirmation with a lawyer.
Security measures (design objectives)
Design objectives: a separate space for each organization, protection of stored data, role-based access with an audit trail, and configurable sign-in security. They are being integrated into the product and are not promises of a result. No system is risk-free.
Sub-processors
Claria uses providers for hosting, storage, email and payments. The list of providers and the way changes are notified are pending.
Return and deletion
When the agreement ends, the organization can export its data and ask for it to be deleted. Retention periods are pending.