Data processing agreement (Teams)

In plain language

• For YomuScan for Teams, your organisation is the controller and [Company legal name] is the processor. We process data on your organisation’s instructions.
• Synced documents are end-to-end encrypted, so we hold them as encrypted files. Member emails, roles, single sign-on settings and the audit log are the data we can read. The audit log records who did what and when, with IP addresses, and is kept for [audit log retention period].
• Documents in team folders follow your organisation’s retention and legal-hold settings, also when a member deletes their account.
• Our sub-processors are listed under Who receives data. Ask for the agreement at [email protected].

In plain language

• Amazon Web Services (AWS) hosts YomuScan in the region you chose: encrypted files, account details, sign-in (Amazon Cognito) and our emails (Amazon SES).
• [Merchant of record] sells web subscriptions: it receives your name, email, country and payment details, takes the payment, and issues invoices and refunds.
• Apple and Google handle app purchases, sign-in with Apple or Google, and push notifications. On the Free plan, Google shows ads in the app.
• RevenueCat receives purchase records so the app knows your plan.
• [AI provider name] receives the text of the pages you choose, only when you use an AI action.
• [Error reporting provider] receives crash and error reports from the apps and the website.
• For YomuScan for Teams, your organisation’s admins see member names, emails, roles and the audit log.