What personal data we collect, how we use and protect it, and your rights — including GDPR, UK GDPR, and California privacy rights.

The agreement governing use of the platform, including the Customer Data Processing Terms for storage facilities.

GDPR Article 28 processor terms that apply automatically to all business customers, with Standard Contractual Clauses for international transfers.

Two-way confidentiality terms covering business and technical information exchanged between Softserve and facility customers.

We are certified under the EU-U.S. Data Privacy Framework and the UK Extension. Our commitments for personal data received from the EEA and UK, including recourse through JAMS.

The third-party providers we use to deliver the service, the data they process, and the transfer safeguards in place.

Our security program: encryption, infrastructure, monitoring, incident response, and 72-hour breach notification.

How data is classified, encrypted, segregated by tenant, and protected throughout its lifecycle — including payment data handling.

How long each category of data is kept, and how it is securely disposed of when no longer needed.

How access to customer data is granted, restricted, reviewed, and revoked across our team and systems.

GDPR Article 30 inventory of controller and processor activities, transfers, retention, and Art. 27 representatives.

What personal data we collect, how we use and protect it, and your rights — including GDPR, UK GDPR, and California privacy rights.

The agreement governing use of the platform, including the Customer Data Processing Terms for storage facilities.

GDPR Article 28 processor terms that apply automatically to all business customers, with Standard Contractual Clauses for international transfers.

Two-way confidentiality terms covering business and technical information exchanged between Softserve and facility customers.

We are certified under the EU-U.S. Data Privacy Framework and the UK Extension. Our commitments for personal data received from the EEA and UK, including recourse through JAMS.

The third-party providers we use to deliver the service, the data they process, and the transfer safeguards in place.

Our security program: encryption, infrastructure, monitoring, incident response, and 72-hour breach notification.

How data is classified, encrypted, segregated by tenant, and protected throughout its lifecycle — including payment data handling.

How long each category of data is kept, and how it is securely disposed of when no longer needed.

How access to customer data is granted, restricted, reviewed, and revoked across our team and systems.

GDPR Article 30 inventory of controller and processor activities, transfers, retention, and Art. 27 representatives.