Data processing

A starting point, not legal advice. If you operate this installation on behalf of other organizations, have this reviewed. Edit it under Platform → Legal.

Scope

This addendum applies where the operator of this installation processes personal data on behalf of another organization — for example, where one company runs Trace for several contracting businesses.

Roles

The customer is the controller. The operator is the processor. The operator processes personal data only on the customer's documented instructions.

Nature of processing

Categories of data subject: the customer's employees and contractors, and individuals appearing in or named on documentation they create.

Categories of personal data: names, contact details, job titles, device identifiers, capture location and timestamps, and any personal data contained in photographs, captions or notes.

Purpose: providing job-site documentation, filing, reporting and sharing.

Security

The operator maintains appropriate technical and organisational measures, including access control by role, tenant isolation enforced at the data layer, encryption of credentials at rest, and signed webhook delivery.

Sub-processors

The operator's own hosting and storage providers. Where a customer configures an AI provider using its own credentials, that provider becomes a sub-processor of that customer's choosing, receiving text metadata only.

Deletion and return

On termination, the customer may export all data through the application. The operator deletes remaining data within a reasonable period unless required by law to retain it.