Data Processing Agreement framework.

Roles and instructions

For customer content processed through TechShield, the customer acts as controller and Kevs IT Ltd acts as processor, processing personal data only on documented instructions and to provide, secure and support the service.

Confidentiality and security

Authorised personnel are subject to confidentiality obligations. Technical and organisational controls include tenant separation, access control, encryption in transit, audit logging, backups, vulnerability management and incident response.

Subprocessors and transfers

Approved subprocessors are listed on the subprocessor page. Customers will be informed of material changes. International transfers must use an appropriate UK transfer mechanism where required.

Assistance and deletion

We assist with data-subject requests, security incidents and compliance information where reasonably required. On termination, customer data is returned or deleted in accordance with the agreed retention schedule unless law requires continued retention.