Data retention policy
Customer data is retained for the period of service provided to the customer, plus 60 days after the termination of the service, to ensure the customer can get any residual data desired within a reasonable time after termination. By default, mail and calendar bodies are deleted 15 days after ingestion. Activity metadata and derived data (names, email addresses, titles, phone numbers, dates, subject lines) and CRM data are kept within People.ai throughout the period of the services. However, the specific agreement will be defined in the signed end-user service agreement (EUSA), Sections 5 and 7.
Data archiving and removal policy
Encyrpted AWS-native backup systems are utilized, with no off-site backup service, and maintained in a 7-day rolling backup retention period. Backups are automatically deleted per the Data Retention Policy and the signed end-user service agreement (EUSA) with the customer.
Data storage policy
Data is stored in compliance with ISO 27001 and ISO 27701. It is stored in AWS S3 bucket, logically separated by customer, and encrypted with a unique key per tenant, managed through AWS KMS. All data is anonymized in every storage according to GDPR policies.
App/service has sub-processors
yes
Guidelines for sub-processors