Scope
GrailPilot acts as the controller for account data of individual collectors. Where a business uses GrailPilot on behalf of its own customers, we act as processor and a separate agreement applies.
Security measures
Data is encrypted in transit and at rest. Access to production systems is limited to the people who need it and is logged.
Row level security in the database means one account can never read another account rows.
Requests
Send data processing questions, agreement requests, or breach notifications to support@grailpilot.com.
Questions about this document? Email support@grailpilot.com and a real person will answer.