For GDPR & POPIA compliance; outlines how Insly handles personal data as a processor.
1. Definitions
- Data Controller: The customer or organization that determines the purpose and means of processing personal data
- Data Processor: Insly, acting on behalf of the controller
2. Scope of Processing
Insly processes personal data only for providing authentication and connected services, including:
- User account creation and login
- Access control to Insly applications
- Usage analytics and system performance
3. Data Protection Measures
Insly commits to:
- Encryption at rest and in transit
- Regular security audits
- Restricting access to authorized personnel only
4. Sub-processors
We may engage sub-processors (cloud hosting, email delivery, analytics). We ensure:
- Written contracts
- Adequate data protection measures
- Compliance with applicable laws
5. Data Subject Rights
Insly assists controllers in:
- Data access & portability
- Rectification & deletion requests
- Complaint handling
6. Termination
Upon termination, Insly will delete or return personal data according to the controller's instructions.