Data processing agreement

You are the data controller. Yves Intelligence Ltd is the data processor. We process personal data only on your documented instructions, which are the subscription itself plus anything you send us in writing.

The subject matter is the operation of a feedback intelligence platform for your institution. Processing lasts for the term of the subscription plus the deletion window set out below.

• Message content written by anonymous contributors, which may incidentally contain personal data the contributor chose to include.
• Derived analysis: translation, classification, sentiment, urgency, actionability, topics, embeddings and integrity verdicts.
• A rotating, salted cryptographic device fingerprint used solely for burst and duplicate anomaly detection, unresolvable to individual identities and excluded from operator interfaces.
• Console user account data: name, email address, role, and activity records.

• Tenant isolation enforced at the data layer on every table, and re-applied in every query.
• Encryption in transit and at rest, with service keys held exclusively server-side.
• Purpose-based access to anything containing personal data, expiring automatically after eight hours and logged as a security event.
• Role-based redaction, an immutable audit trail written at the data layer, and a documented detection-rule catalogue.

A current list is published and maintained. We give thirty days' notice before adding one, and where an objection stands unresolved you may terminate the affected service with no penalty.

Message text is transferred to our language model provider for translation and classification, under terms that prohibit retention for model training. Dedicated deployments may route this to a provider and region of your choosing, or to your own contracted keys.

We notify you within seventy-two hours of becoming aware of a personal data breach affecting your tenant, carrying everything we know at the time.

On termination you receive a full export of every message, translation, enrichment and audit row in open formats. We then delete your data within thirty days, except where retention is required by law, in which case we tell you what and for how long.

You may audit our compliance once per year with reasonable notice, or more often following a breach. On Enterprise and Dedicated you may commission your own penetration test against a scope we agree.