Data Processing Agreement

Processing instructions

Tanxor processes Customer Personal Data only on documented customer instructions, including configured features, integrations, support requests, and the agreement, unless law requires otherwise.

Confidentiality and security

• Personnel confidentiality obligations and least-privilege access.
• Encryption in transit and at rest where supported.
• Tenant isolation, authentication controls, audit trails, backups, monitoring, and incident response.
• Regular testing and remediation appropriate to risk.

Subprocessors

Tanxor may use the subprocessors listed on the Subprocessors page. Customers receive notice of material changes and may object on reasonable data-protection grounds through the contractual process.

Data subject requests and incidents

Taking into account the nature of processing, Tanxor assists customers with rights requests, security incidents, DPIAs, and regulator consultations. Confirmed personal data breaches are notified without undue delay as required by law.

Deletion, return, and audits

During the term, customers can export data through the Privacy & Data center. At termination, data is returned or deleted according to configured retention, legal holds, backup cycles, and the agreement. Audit information is supplied through certifications, reports, and reasonable review mechanisms.

International transfers

Where required, applicable Standard Contractual Clauses and supplementary safeguards are incorporated through the signed DPA or order form. Contact legal@tanxor.com for an execution copy.