Data processing agreement
Version 2026-09
This agreement applies when your agency (the controller) uses Quantro OS (Quantro Digital, the processor) to handle personal information about its clients and staff.
Processing
We process personal information only on your documented instructions — which are using Quantro OS as designed — and only to provide the service.
Confidentiality and security
People who can access the data are bound by confidentiality. We maintain the security measures described in the privacy policy and review them regularly, including an independent penetration test.
Sub-processors
Our current sub-processors are listed in the privacy policy. We'll give you notice before adding new ones so you can object.
Assistance, breaches and audits
We help you answer requests from individuals, notify you without undue delay of a personal data breach affecting your account, and provide the information reasonably needed to show compliance.
End of service
When the service ends you can export your data; we then delete it as described in the terms, except where the law requires us to keep it.