Where your data is hosted, and how it is protected
Where Conphora keeps product data and documents, who can see them, what happens to them when a subscription ends, and how Conphora complies with the GDPR.
Where your data is hosted
conphora.com, the platform’s application data and the documents you upload are hosted with Scaleway SAS in France, inside the EU. A few vendors process limited data outside the EU — the sign-in provider that holds your account details, for example — and they do so under the European Commission’s Standard Contractual Clauses or the EU-U.S. Data Privacy Framework. The Sub-processors page lists every vendor, what it handles and where.
How it is protected
Conphora uses appropriate technical and organisational security measures to protect data against unauthorised access, loss, misuse and alteration. Access is restricted to the people and vendors who need it to run the service. Within your own organisation, an admin decides who is a member and what each role can do; see Organisations, roles and invitations.
Can Conphora see my product data?
Conphora processes your data to deliver the service — validation, document matching, reports. We do not sell your data to anyone. For the data your organisation keeps in the platform, your organisation is the data controller and Conphora is its processor under the data processing agreement in the terms of use.
What happens to the data when a subscription ends
Cancelling does not delete anything. The organisation, its products and its documents stay in place, and you can start the subscription again later. If you want the organisation’s data deleted, an admin requests that in the platform under Settings › Data protection, or by sending a request. The steps are in Cancel or change the subscription; what applies when an agreement is terminated is set out in the terms of use.
Does Conphora comply with the GDPR?
Yes. Conphora ApS is a Danish company and complies with the General Data Protection Regulation (GDPR) and Danish data protection law. The Privacy Policy describes what is processed, on which legal basis and for how long. How to get a copy of your own data, have it corrected or have it deleted is in Your data and privacy.
A question about security that is not answered here? Send a request.
Was this helpful?
Thanks — your feedback helps us improve this article.