Data Processing Addendum

This page summarises our Data Processing Addendum (DPA), which forms part of the Terms of Service and meets Article 28 of the UK GDPR. To request a signed copy, email [TO CONFIRM: legal@deskivo.cloud].

Roles

The customer is the controller of personal data in its workspace. Impact Solution Group Limited is the processor.

Subject matter and duration

Providing the Deskivo service for the length of the subscription, plus the deletion period after it ends.

Nature and purpose

Hosting, storing, displaying, transmitting (for example sending notification emails), backing up and supporting the service.

Types of data and data subjects

Staff, students, contractors and other users of the customer: names, work email addresses, roles, device and asset assignments, ticket contents and attachments, sign-in records and audit logs. Customers should avoid putting special category data in tickets unless needed, and can mark ticket types confidential.

Our commitments

• Process personal data only on the customer's documented instructions
• Make sure our staff are bound by confidentiality
• Keep appropriate technical and organisational security measures, including database-level tenant isolation, encryption in transit and of secrets at rest, access controls, two-factor authentication and audit logging (see Security)
• Use only the sub-processors listed below, under written contracts with equivalent protections, and give notice of changes so the customer can object
• Help the customer respond to data subject requests and with security, breach notification, impact assessments and consultation
• Notify the customer without undue delay after becoming aware of a personal data breach
• Delete or return personal data at the end of the service, unless the law requires us to keep it
• Make available the information needed to show compliance, and allow reasonable audits
• Transfer data outside the UK only with appropriate safeguards (UK IDTA or the UK Addendum to the EU SCCs)

Hosting region

Your data is hosted on servers based in the UK. Each workspace is pinned to a region.

Sub-processors