Data Protection
How we approach the handling of client and end-customer data in delivery.
Placeholder document
This page sets out the structure of the data protection only. It contains no legal wording and creates no obligations. Final text will be drafted with counsel for Asansa Solutions Pvt. Ltd. If you need the current position on any point below before then, ask us directly.
Roles
Controller and processor roles for client engagements, and how they are recorded in the data processing agreement.
Access control
How access to client systems is granted, reviewed and revoked, and the principle of least privilege applied to agent accounts.
Confidentiality
Confidentiality obligations placed on employees and contractors, and how they are evidenced.
Security measures
Technical and organisational measures actually in place. No certification will be listed here unless it has been independently issued and can be evidenced on request.
Incident handling
Notification timelines, escalation contacts and the client's role in incident response.
Sub-processors
The current sub-processor list, notification of changes, and the client's objection rights.
Contact details for legal and privacy enquiries will be published here alongside the final wording. Placeholder details are marked throughout this demo build.