Roles
The customer is the data controller and Marginera is the data processor. Marginera processes data only on the customer’s documented instructions and for the purpose of providing the service.
Technical and organisational measures
Row-level security at tenant and location level, separation of roles, a chained audit log, encryption in transit and at rest, the principle of least privilege, and disconnection via kill switch.
Sub-processors
Before a new sub-processor is added, the customer is notified and given a period to object.
AI
Raw document text is not sent to the model in assistant requests; only approved summary fields are used. Customer data is not used to train models.