Mkataba wa Uchakataji Data
ya Threada kawaida Data Processing Agreement covering GDPR, CCPA, na other applicable data protection obligations.
Upeo na applicability
Hii DPA applies kwa all processing ya data binafsi performed by Threada kwenye behalf ya hii mteja katika connection kwa hii Threada platform. It supplements hii Masharti ya Service na governs data handling, usalama measures, na breach arifa procedures.
Majukumu na responsibilities
Hii mteja acts as hii data controller. Threada acts as data processor, processing data binafsi only as instructed by hii mteja na as necessary kwa deliver hii service.
Kiufundi na organizational measures
- Encryption katika transit (TLS 1.2+) na at rest (AES-256)
- Tenant-wenye upeo data isolation kwa hakuna cross-tenant ufikiaji
- Ufikiaji unaotegemea jukumu vidhibiti kwa ukaguzi logging
- Uchunguzi wa kiotomatiki wa udhaifu wa tegemezi na ushauri pamoja na modeli ya vitisho inayodumishwa
- Incident response procedures kwa defined arifa timelines
Wachakataji wadogo
Threada maintains sasa list ya subprocessors. Wateja ni notified ya material changes. See hii subprocessors ukurasa kwa hii full list.
Data subject haki
Threada supports wateja katika responding kwa data subject ufikiaji, rectification, deletion, na portability maombi through platform tooling na kiuendeshaji processes.
Data uhifadhi na deletion
Data uhifadhi sera ni configurable per workspace. Upon mkataba termination, mteja data ni deleted within 90 days unless longer uhifadhi period ni inahitajika by law.