Data Processing Agreement

This DPA describes how Novua Control processes customer operational data when acting on behalf of a workspace.

1. Roles

The customer acts as controller for workspace data it submits or connects. Novua Control acts as processor for that data when providing the service.

2. Processing purpose

Processing is limited to ingesting source-system events, generating operational evidence, storing incident records, supporting audit logs, and enabling workspace users to manage release and incident workflows.

3. Security measures

Reasonable technical and organizational measures are used to protect workspace data, including authenticated access, workspace scoping, and restricted infrastructure access.

4. Subprocessors

Hosting, storage, billing, and integration vendors may be used where required to operate the service. Additional subprocessors may be introduced as the product evolves.

5. Customer requests

Requests related to deletion, export, or processing restrictions can be made by contacting iveteamorim@gmail.com.