Yes. Raison applies the GDPR to all processing of personal data, supported by Bastion Technologies (external DPO/CISO).
Key measures in place
A Data Processing Agreement (DPA) is available for signature with each client.
The list of authorised subprocessors is maintained and updated.
Clients are notified of any material change to subprocessors with at least 15 days’ notice.
Data deletion within 30 days after end of contract or account deletion.
Encrypted backups; inaccessibility guaranteed within 30 days by key destruction.
Related
Need help? Write to [email protected].
