Security

Security FAQ

The security section of the product FAQ: scope of access to Jira and exclusions from it, hosting and processing location, inputs to the LLM sub-processor, and return or deletion of customer data on termination.

Data protection

Privacy policy

Categories of personal data collected, the purposes and lawful bases for processing, and data subject rights. The four sections most often consulted are linked below.

Data subject rights

Privacy policyRights available over personal data and how to exercise them.

International data transfers

Privacy policyJurisdictions in which personal data is processed, and the transfer mechanisms relied on.

Data security and retention

Privacy policySecurity measures applied to personal data, retention periods, and treatment on termination.

Cookies and tracking technologies

Privacy policyCookies set by this website, the purpose of each, and how to refuse them.

Agreements

Data processing agreement

Article 28 terms for processing personal data on the customer's behalf: details of processing, processor obligations, personal data breach notification, audit rights, and the list of authorised sub-processors.

Authorised sub-processors

DPAThe sub-processors authorised under the DPA, including the LLM provider used for summarisation.

Technical and organisational measures

DPAThe security measures Recadence is contractually bound to maintain.

Assistance with data subject requests

DPAProcessor obligations where a data subject exercises rights against the customer.

Terms of service

The contract governing use of the service, under which the DPA applies.

Security questionnaires, vendor assessments, and questions not covered above: hello@recadence.ai.