DATA PROCESSING AND PROVIDERS

YOUR ORGANIZATION AND ITS INFORMATION

Organizations decide which company records may be submitted and the purposes for which they are used. The allocation of controller, processor and other data-protection responsibilities belongs in the agreement for the service and the law that applies.

For enquiries about an individual’s information in company documents or recordings, identify the organization that controls those records. Account, support, billing and security information can involve separate purposes and responsibilities.

SERVICE AND PROVIDER INFORMATION

The AWS service paths described for VETRA include cloud infrastructure and storage, identity, email delivery and the AI services below. This is an explanation of service categories, not a certified list of every subprocessor active in your workspace.

LOCATIONS RETENTION AND THIRD PARTIES

Request the current provider list, legal provider entities, processing purposes, primary regions, inference destination regions and backup locations for your service. Ask whether mapping, tracking or malware-scanning services receive personal information.

Processing and storage may occur outside your country. The safeguards and permissions for international transfers, including any local storage requirement, need to match the service and jurisdictions concerned.

Ask for the retention periods covering recordings, transcripts, drafts, approved outputs, generated audio, activity records, temporary files and backups. A provider’s default does not establish the settings of a particular VETRA account.

DATA PROCESSING AGREEMENTS

Companies can request information about a data processing addendum for their service. The appropriate agreement should identify the parties, processing instructions, data categories, purposes, providers, locations and applicable transfer arrangements.

Security obligations, subprocessor changes, incident notices, assistance with privacy requests, return or deletion of data and audit arrangements should be addressed in the agreed terms.

This page is not an executed data processing agreement and does not incorporate unsigned contractual clauses. Your signed documents determine the agreed obligations, subject to applicable law.

SECURITY INFORMATION

Ask for the security information relevant to the deployed service, including access permissions, document protection, encryption, malware scanning, audit records, backups and recovery arrangements.

A product description, interface control or cloud provider certification does not establish that every control is operating in a customer workspace, or that VETRA holds an independent certification. Request evidence for requirements that are material to your organization.

REQUEST INFORMATION

Use the privacy enquiry form to request data-processing terms, provider information, retention details or help with a privacy request. Include your organization and the subject of your question. Do not attach sensitive records or send credentials.

Submitting a request does not execute an agreement or grant access to a workspace. The team can identify the appropriate service information and review process for your organization.