Data Processing Addendum

This addendum forms part of the Terms of Service for customers using RemoteHub for a business, where we process personal data on your behalf.

Roles

You are the controller of personal data in your workspace (for example, your team members, device names and session records). We act as processor and process it only on your documented instructions, which are the terms, your configuration of the service, and your support requests.

Our obligations

• Keep personal data confidential, and bind our staff and subprocessors to confidentiality.
• Apply appropriate technical and organisational measures, including encryption in transit, end-to-end encrypted sessions, access controls with two-factor authentication, and audit logging.
• Help you respond to data subject requests and data protection impact assessments.
• Notify you without undue delay, and within 72 hours where possible, after becoming aware of a personal data breach affecting your data.
• Delete or return your data at the end of the service, subject to legal retention duties.
• Make available the information needed to demonstrate compliance.

Subprocessors

You authorise the subprocessors listed on our site. We will give 30 days' notice of new subprocessors, and you may object on reasonable grounds.

International transfers

Where personal data is transferred outside the EEA, UK or Switzerland to a country without an adequacy decision, the EU Standard Contractual Clauses (processor module) and the UK addendum apply.

Contact

Data protection questions: support@remotehub.app. To request a countersigned copy of this addendum, email sales@remotehub.app.