GDPR and data processing

Clear data responsibilities for European customers.

Allocyn provides product controls and contractual commitments that support customer compliance. Each customer remains responsible for its own purposes, lawful basis, user notices, and use of personal data.

Last updated 4 September 2026Buyer summary available · formal role map and contracts under legal review
Responsibilities

Controller and processor roles depend on the activity.

The operator may be controller for its website, business, billing, security, and service administration. For customer workspace data, Allocyn typically follows the customer organization's instructions. The detailed responsibilities and agreement remain under legal review.

Product controls

Configure access and manage the workspace.

  • ✓Customer-workspace separation
  • ✓Roles and permissions
  • ✓Customer-selected integrations
  • ✓Supported exports
  • ✓Controlled organization deletion
  • ✓AI configuration and human review
Data lifecycle

Use documented export, retention, and deletion paths.

Supported exports are available to authorized users. Retention differs by record category. Workspace deletion follows a recovery period and controlled administrator action, while legally required records may remain.

Customer support

Contractual assistance requires an approved agreement.

The standard DPA is being prepared for legal approval and is not represented as executed by this summary. It is intended to cover rights requests, incidents, impact assessments, subprocessors, deletion, audits, and transfers.