Controller and processor model
Customers decide which public or authorized sources are processed; MediaHarvester processes requests according to API instructions.
customer_instructions
DPA
PROCESSING
SECURITY
Data Processing Addendum
Article-28-oriented DPA template backed by operational tenant export, deletion, legal-hold, retention and provider inventory controls.
Retention controls
Tenant export/deletion and admin retention/legal-hold workflows are implemented and tenant scoped.
DELETE /v1/privacy/tenant
No hosted subprocessors locally
The live provider inventory reports configured billing and hosted fallback/AI providers without exposing credentials.
GET /v1/compliance/subprocessors
DPA status
Implementation-ready template
Engineering controls and template are implemented; party identities, transfer mechanisms and signature/commercial annex require legal owner input.
This page documents technical readiness and does not claim a signed production DPA.