Legal & trust center
Data Processing Agreement
Processor commitments for customer personal data handled through SupportDesk.
Last updated: September 4, 2026
Roles
The customer is the controller of customer data processed in SupportDesk and Crimson Cloud acts as processor, except where law requires otherwise.
Processing instructions
We process personal data only to provide, secure and support the service, under documented customer instructions and applicable law.
Security and subprocessors
We use appropriate technical and organisational measures and maintain a process for evaluating subprocessors. A signed, customer-specific DPA should define the final terms, transfers and breach-notification commitments.
This is an operational policy template, not legal advice. Have qualified counsel review and approve it, including contact details, retention periods and any required jurisdiction-specific terms, before publishing to customers.