Data-processing terms summary

This page summarises Haccora's processor commitments and does not replace the executed data-processing agreement included with a subscription order.

Roles and instructions

The customer is normally controller for personal data placed in its workspace and Haccora is processor. We process it only to provide, secure and support the contracted service on documented lawful instructions.

Processor commitments

• Confidentiality and access limited by role, tenant and location.
• Appropriate technical and organisational security measures.
• Controlled subprocessors with equivalent obligations.
• Assistance with rights requests, risk assessments and regulator enquiries.
• Prompt notice and cooperation for confirmed personal-data breaches.
• Return or deletion at the end of services, subject to law and backup rotation.

Customer responsibilities

The customer must provide lawful instructions, required privacy information, suitable retention, user-access controls and an assessment of special-category health processing.