Roles
For personal data contained in customer backups, the customer is normally the controller or business, and SafetyOnCloud acts as processor, service provider or equivalent role, processing data only to provide the services and according to documented instructions.
Subject matter and duration
Processing covers backup, storage, monitoring, restore assistance, support, security, troubleshooting, billing and service administration for the duration of the subscription and any required retention, offboarding or legal period.
Data categories
Customer backups may include files, databases, email, collaboration data, system metadata, logs, identifiers, credentials supplied for service operation and any personal data the customer chooses to protect. Data subjects may include employees, customers, suppliers, users and other persons represented in customer data.
Security measures
SafetyOnCloud applies access control, credential protection, encryption where supported, least privilege, logging, backup system controls and vendor management appropriate to the service. Customer remains responsible for endpoint security, access permissions, source system integrity and data classification.
Subprocessors
SafetyOnCloud may use subprocessors for cloud infrastructure, storage, backup technology, payment processing, CRM, support, messaging and monitoring. SafetyOnCloud remains responsible for its subprocessors to the extent required by applicable data protection law and will provide additional information upon request.
Assistance and deletion
SafetyOnCloud will provide commercially reasonable assistance for data subject requests, security inquiries, return, deletion or export of data, subject to technical feasibility, plan scope and applicable fees.