Data processing
This summarizes how Safe Trust AI processes customer data when acting on a customer's behalf. It is a working draft and should be confirmed by counsel before launch.
Roles
When we examine media on a customer’s instructions, the customer is the controller of that data and Safe Trust AI acts as a processor. We process customer media to provide the examination service and for no unrelated purpose.
Scope of processing
- Subject matter: examination of media to produce authenticity verdicts and evidence records.
- Nature & purpose: analysis of submitted media on the customer’s instructions.
- Data types: the media submitted, which may include personal data such as images or voices of individuals.
- Duration: for the term of the customer relationship and the customer’s configured retention period.
Location and transfers
Examination can run in a region the customer selects. Where data transfers occur, appropriate safeguards will be applied. On-premise and dedicated deployments are available for customers that cannot send media outside their environment.
Sub-processors
We use a limited set of sub-processors to operate the service, under appropriate contractual terms. Categories are listed on our sub-processors page.
Security and deletion
We apply standard technical and organizational measures to protect customer data, described on our security page. Customer data is deleted in line with the customer’s retention policy and applicable obligations.
Requesting a DPA
A formal data processing agreement can be provided as part of contracting. To request one, contact contact@safetrustlab.ai.