This Data Processing Agreement governs the processing of personal data by CAM PRO (the Processor) on behalf of the Customer (the Controller). This is a placeholder to be reviewed by legal counsel before launch.
The Customer is the Data Controller; CAM PRO acts as Data Processor and processes personal data only on documented instructions from the Controller.
Processing covers the workforce, SHEQ, and project data entered into the platform for the purpose of delivering the CAM PRO service.
CAM PRO implements appropriate technical and organisational measures: AWS Enterprise S3 storage, AES-256 encryption at rest, TLS in transit, strict multi-tenant isolation, and role-based access control.
CAM PRO uses vetted sub-processors (including Amazon Web Services). A current list is available on request; the Controller will be notified of changes.
CAM PRO will assist the Controller in responding to data subject requests and in meeting UK GDPR obligations.
CAM PRO will notify the Controller without undue delay after becoming aware of a personal data breach.
On termination, CAM PRO will return or securely delete personal data at the Controller's choice, save where retention is required by law.