Roles
The organization is responsible for participant data it enters. Atharix processes that data on the organization's instructions to provide the service. Operator: [Operating legal entity — to be confirmed].
Security measures
Separated organization data enforced in the database, private file storage, encrypted connections, server-side sessions, two-step verification for staff and an activity log.
Subprocessors
Hosting, file storage and email delivery providers will be listed before launch. No provider has been selected for production yet.
Location
The production hosting region will be confirmed before launch.
At the end
When an organization closes its account, records are kept only as long as needed for verification under the retention terms, then deleted.