Legal
Data processing
A plain summary of the processing terms. A full data processing agreement is available to sign — ask and we will send it.
Draft, pending legal review. This describes how Evidence Bank actually works today and is written to be accurate, but it has not been reviewed by a solicitor. Have it checked before relying on it in a contract.
Roles
For the content your team puts into Evidence Bank, your organisation is the controller and we are the processor. We process it only to provide the service, and only on your instructions.
Subject matter and duration
- Subject matter: providing Evidence Bank as a hosted service.
- Duration: for as long as your organisation uses the service, plus up to 30 days to complete deletion.
- Nature and purpose: storing, indexing, searching and displaying the evidence and decisions your team records.
- Categories of data subject: your employees, and any individuals described in evidence your team records — typically research participants and customers.
- Types of personal data: names and work email addresses of your team; whatever your team chooses to include in evidence, including transcripts.
Our obligations
- Process only on your documented instructions.
- Keep the people with access bound by confidentiality.
- Apply appropriate technical and organisational measures — set out on the security page.
- Use only the sub-processors listed, and give 30 days' notice before adding one.
- Help you respond to data subject requests, and to regulators.
- Tell you without undue delay if there is a personal data breach.
- Delete or return your data at the end, on your choice.
- Make available what you need to demonstrate compliance, and allow audit on reasonable notice.
International transfers
Stored data stays in the United Kingdom. Where AI features are switched on, request text is processed in the United States under standard contractual clauses with the UK addendum. Turning the AI features off removes those transfers entirely.
Getting a signed agreement
Email hello@chrisberridge.com and we will send the full agreement for signature, along with anything else procurement needs. We would rather answer these questions before a pilot than during one.