Security & compliance¶
What DataQ does with the data it sees, how it authenticates and authorises people, and the documents a privacy or security review will ask for.
-
Security & data handling
Authentication modes, workspace roles, secret storage, PII redaction, retention and the audit trail — in plain language.
-
Compliance pack
Processor-side artifacts for GDPR, CCPA and HIPAA reviews.
Sub-processors · DPIA input sheet · Data-subject rights · Breach notification · DPA / BAA templates
Scope
These pages describe the controls DataQ implements as a data processor. Lawful basis, consent, and contractual terms remain the deploying organisation's responsibility, and the DPA / BAA drafts are counsel-gated templates, not executed agreements.