Purpose
This Addendum applies where B2BEA processes personal information on behalf of a customer.
Roles
The customer is generally the controller/business and B2BEA acts as the processor/service provider for assessment information.
Processing
B2BEA processes information only to deliver agreed services and documented customer instructions.
Security
Appropriate technical and organisational measures are maintained to protect information.
Subprocessors
B2BEA may engage reputable cloud and software providers subject to confidentiality and security obligations.
Incident Notification
B2BEA will notify affected customers without undue delay after confirming a security incident affecting customer information where notification is required.
Deletion
Upon request or termination, customer information will be deleted or returned unless retention is required by law.
Audit
Reasonable information regarding security practices may be provided upon request, subject to confidentiality obligations.
This page is maintained by B2BEA Inc. and describes current MVP-stage practices. For questions, contact info@b2bea.org.