Enterprise privacy
Data Processing Addendum
This page summarizes the standard privacy terms available for Enterprise customers. The executed DPA is incorporated into the applicable order form or customer agreement.
Roles and instructions
Where Secure Git Bridge processes personal data on behalf of an Enterprise customer, the customer acts as controller/business and the Secure Git Bridge contracting entity acts as processor/service provider or contractor, as applicable. Processing is limited to documented instructions, providing and securing the service, and legal obligations.
Security and confidentiality
We limit access to authorized personnel and use technical and organizational measures including HTTPS, access controls, protected administration, scoped repository authority, audit records, backups, and protected local credential storage. Repository source code is not stored in the commercial licensing and billing database.
Subprocessors
Current providers are listed on the Subprocessors page. Applicable data-protection obligations are passed through contractually to providers used to process customer personal data.
Individual rights and assistance
Taking into account the nature of processing, we provide reasonable assistance for verified access, correction, deletion, restriction, objection, and portability requests where the customer cannot fulfill the request independently.
Incidents
Where Secure Git Bridge acts as processor, we notify the affected customer without undue delay after confirming a personal-data breach affecting customer personal data and provide reasonably available information needed for the customer's legal analysis.
Return, deletion, and retention
At termination and on documented instruction, processor-held customer personal data is deleted or returned unless retention is required by law. Backup copies age out under the documented retention schedule.
International transfers
For restricted transfers from the EEA where no adequacy mechanism applies, the signed DPA can incorporate the then-applicable European Commission Standard Contractual Clauses using the module appropriate to the parties' roles. UK restricted transfers use the applicable UK transfer mechanism.
California service-provider terms
Where the CCPA applies and Secure Git Bridge acts as a service provider or contractor, covered personal information is processed only for specified business purposes and as otherwise legally permitted. Secure Git Bridge does not sell or share customer personal information for cross-context behavioral advertising.
Execute a DPA
Enterprise customers can request the customer-specific DPA, security schedule, and transfer annexes through the Enterprise evaluation form.