Legal
Data processing agreement
A summary of the processing terms that apply when Vairitas handles data on your behalf. The executable document is issued with the platform agreement and is available on request.
01Roles
For platform data you are the controller and Vairitas Ltd is the processor. We process only on your documented instructions, which are the platform agreement and this document.
02Scope of processing
Operational building data, asset records, job and compliance records, uploaded documents, and the named users, engineers and suppliers recorded against work. Processing runs for the term of the agreement.
03Security measures
Tenant isolation enforced by row level security at the database, role-scoped access across eight roles, append only audit of administrative writes, and edge appliances holding site-scoped secrets. Detail on the trust page.
04Sub-processors
Hosting and database services run on certified infrastructure. A current list is available on request, and we give notice before adding a sub-processor so you can object.
05Assistance and breach
We assist with data subject requests and with your own impact assessments. A personal data breach is reported to you without undue delay, with the facts known at the time rather than after an internal review concludes.
06Return and deletion
On termination we return or delete the data at your choice, subject to any retention the law requires of us. Backups age out on their normal cycle.
Questions about this page go to info@vairitas.com. Vairitas Ltd is registered in England and Wales.
Still need an answer?
Send the question to a person rather than a queue. We would rather answer it properly once.