Loading page…
Legal & data governance
Review how Bitscaled handles client data, governs AI, and defines the responsibilities behind our managed IT services and Client Workspace.
Our Data Processing Agreement (DPA) defines the processor terms for Client Data: documented instructions, confidentiality, incident notification, sub-processors, assistance with privacy requests, and return or deletion when services end.
| Framework | Contractual safeguards |
|---|---|
| GDPR / UK GDPR | Article 28 processing instructions, data-subject assistance, and applicable international transfer safeguards. |
| CCPA / CPRA | Service-provider restrictions on selling, sharing, combining, and using Client Data outside the contracted business purpose. |
| HIPAA | A signed Business Associate Agreement and an in-scope SOW are required before any protected health information is processed. |
02 / Responsible AI
Client Data is processed on documented instructions. Our privacy policy commits that operational AI logs are not used to train public foundation models. Customer infrastructure data, telemetry, and source code remain subject to those instructions and the applicable agreement.
AI features may retain conversation history, prompts, or operational logs. A zero-retention requirement must be agreed for the specific feature, provider, and data categories before processing begins. A no-training commitment does not mean that no data is stored.
04 / Provider transparency
The full directory identifies core and optional providers. Jurisdictions below describe the published inventory; deployment regions, transfers, and current certification scope should be confirmed during procurement.
| Provider | Processing function | Jurisdiction | Security evidence |
|---|---|---|---|
| Vercel Inc.Core | Website, application hosting, edge delivery, and cookieless Web Analytics / Speed Insights. | United States | Vercel security and compliance Consult Vercel for current certification scope, audit reports, and hosting controls. |
| Supabase / PostgreSQL providerCore | Primary application database for accounts, CRM, billing, tickets, and legal signatures. | United States | Supabase security Consult Supabase for current audit reports and controls for the contracted database service. |
| Twilio SendGridOptional / configured | Fallback transactional and marketing email delivery, event webhooks, and inbound parse when SendGrid is configured as the secondary outbound provider. | United States | Twilio security overview Confirm that Twilio assurance documents cover the SendGrid services in your agreement. |
| Datadog, Inc.Optional / configured | Application monitoring. Browser RUM and session replay on public pages require analytics consent. | United States | Datadog security and compliance Consult Datadog for current certifications, report access, and monitoring service scope. |
05 / Document library
Customer instructions, model training restrictions, and retention requirements.
Read AI GovernanceHow tenant authorization, encryption, and access logging protect client information.
Read Data Isolation & SecurityHow we handle website, account, newsletter, VaultTools, and managed-service data.
Read Privacy PolicyThe rules for using our website, client portal, public tools, and managed services.
Read Terms of ServiceWhat you may and may not do on our website, Client Workspace, public tools, and managed environments.
Read Acceptable Use PolicyNamed cookies, localStorage consent, and how to change analytics preferences.
Read Cookies PolicyProcessor terms for Client Data in managed services and hosted Workspace content.
Read Data Processing AgreementVendors that may process Website Data or Client Data, including optional tools.
Read SubprocessorsHow Bitscaled-owned website and article images may be reused, and how to request a license.
Read Image LicenseHow to report security issues in Bitscaled-operated systems in good faith.
Read Vulnerability DisclosureA downloadable review copy of our DPA, AI governance, data-security summary, and sub-processor disclosures, with links to the current online policies. Signed agreements control where terms differ.
Download the packet (PDF)For contract review, region requirements, or vendor assurance reports, contact legal@bitscaled.tech.