Legal
The terms under which Ellum processes personal data on behalf of customers, including sub-processors and security commitments.
Last updated
The customer is the controller and Ellum the processor for personal data submitted to the workspace. Ellum processes it only on documented instructions.
Infrastructure, model and support providers engaged under written terms. The current list and change notifications will be published on the security page.
Encryption in transit and at rest, access controls, logging, and incident notification without undue delay.
Transfers outside the EEA and UK rely on Standard Contractual Clauses and the UK Addendum where applicable.
Customer data is returned or deleted at the end of the agreement, subject to legal retention duties.
We use cookies
We use strictly necessary cookies to run the site, and optional cookies to understand usage and measure marketing. You can change your choice at any time. Cookie policy