#2174: Does Swarmica Comply with GDPR?
Отредактирована: сегодняDoes Swarmica Comply with GDPR?
Yes, Swarmica supports use in projects that require GDPR compliance. Swarmica can be deployed on-premise in the customer's infrastructure, where the customer controls the environment and processing activities.
Installing the product does not automatically make an organization compliant. Compliance depends on the deployment model, the purposes and categories of processing, system configuration, and the customer's organizational measures.
On-premise deployment
Swarmica by default is deployed on-premise in the customer's infrastructure. With this model, the customer controls the servers, networks, access rights, backups, and system configuration.
Under the GDPR, the customer will generally act as the data controller: the customer determines the purposes and means of processing personal data and is responsible for organizing the processing in its environment.
In this scenario, Swarmica is software supplied to the customer and does not independently determine the purposes of processing the customer's data. Swarmica employees may access personal data only to the extent necessary to provide technical support and only when the customer requests or authorizes that access. Any such access should be controlled by the customer under its internal security rules, contractual arrangements, and applicable GDPR requirements.
What the customer should arrange
- define the purposes and legal bases for processing personal data;
- determine which categories of personal data are processed and for how long;
- configure access rights, accounts, roles, retention, and deletion procedures;
- apply appropriate technical and organizational security measures;
- document any processing carried out by Swarmica or another service provider on the customer's instructions, where applicable;
- handle data-subject requests, records of processing, and breach procedures as required for the customer's role and processing activities;
- verify that the selected configuration and actual workflows meet the organization's GDPR obligations.
Additional information
This article provides general information about the on-premise deployment model and is not legal advice. Before launch, review the specific processing activities with your data-protection lead and legal counsel.