The customer is the controller of tenant/customer data. The platform acts as processor for tenant-scoped SaaS operations unless otherwise agreed.

Controls include authentication, role-based access, tenant isolation, audit logs, rate limits, file upload validation, provider credential protection, and configurable IP/security policies.

Enterprise controls expose primary and backup residency preferences. Actual hosting regions depend on infrastructure selection and provider contracts configured before production go-live.

For international transfers, customers should execute the applicable DPA and Standard Contractual Clauses or equivalent transfer mechanism with the platform operator and relevant subprocessors before production launch.

Retention, export, deletion, consent proof, and data subject request workflows are managed through the privacy compliance center and customer support operations.

Subprocessors may support infrastructure, communications, AI, payments, analytics, and monitoring. Enterprise customers may request the current subprocessor and transfer documentation pack.