Data processing agreement

Version 2026-10-30. Draft for legal review (docs/21-uae-gcc-strategy.md section 7): the text below states the commitments the platform implements; the reviewed wording replaces it before the first paying tenant.

1. Roles

You (the customer) are the controller of the personal data your apps process. Renox processes it on your behalf, only to run, store, back up and secure your apps, and only on your documented instructions: your code, your configuration and this agreement.

2. Where data is processed

Tenant databases, files and backups are stored in the hosting region Renox names for the workspace. Moving them to another region needs your written instruction, except where the law requires it.

3. Security

Each tenant runs in its own isolate with its own database file, per-tenant limits enforced by the platform, outbound requests to private addresses blocked, and secrets encrypted at rest and never written to logs. Operator access to tenant data happens only through a time-boxed, audited break-glass session with a stated reason, and the workspace owner is emailed when one starts and ends.

4. Sub-processors

The infrastructure, email and payment providers that process data for Renox are listed on the status page; you are told 30 days before a new one is added and may object.

5. Breaches

Renox tells the workspace owner without undue delay, and within 72 hours, after becoming aware of a personal data breach that affects the workspace, with what is known and the steps taken.

6. Your requests and deletion

You can export a database at any time. Erasing a workspace deletes its databases, files, replicas and backups within the retention the dashboard shows, and the erasure record states when it completed.

7. Acceptance

Accepting this agreement at sign-up records this version and the time on your workspace.