Data processing agreement

This agreement is between the company that runs Tanzahost (its details are not set up yet) ("we", the processor) and a customer who uses Tanzahost to host personal data of others, such as its own customers or staff ("you", the controller). It's part of the terms of service for every business account, and applies whenever your apps, sites, databases or backups on Tanzahost hold such data. A signed copy is available on request at support@tanzahost.com.

We process it only to host it as you set up in your account: storing, running, backing up, restoring, protecting and deleting it. We don't look at it, change it or share it except as you ask, as the law requires, or to stop an attack or abuse.

The data, the people it's about and the purposes are yours to decide. Typically: names, contact details and orders of your customers, for the purposes of your own business.

Only staff who need it can reach your data, under a duty of confidentiality, and every look at an account is logged and shown to its owner.

Every app and database runs in its own sandbox on its project's private network, connections are encrypted, secrets and backups are encrypted, backups are kept in another location, and logins to our systems need a passkey or a second step. We test our own defences on every change.

You allow us to use the outside companies on our list of outside companies. We bind each by contract to the same protections. We tell you at least 30 days before adding or replacing one, and you may object; if we can't meet your objection, you may close your account and get your unspent paid money back. On request, under confidentiality, we tell you each one's name.

Your data stays in the locations you choose for your projects, and their backups in another location (the same country if you turn on "Data stays in this country"). Where an outside company works from another country, we use the protections the law asks, such as Europe's standard contract clauses.

We help you answer people who use their rights over their data, and with your own assessments, mostly through the tools in your dashboard: exports, deletion and the activity log.

If we find a breach that affects your data, we tell you without undue delay, and within 48 hours, with what we know and what we're doing.

When you delete a project or close your account, its data is deleted as the privacy policy says, including its backups 7 days later. Export what you want to keep first.

We give you the information needed to show we keep this agreement. Further audits are agreed in writing, with notice, at your cost, and without access to other customers' data.