Privacy
Data categories, purpose, retention, rights, and contact decisions.
Trust and legal review center
Publication starts with saying what is not approved.
These pages expose the decisions still needed before a public launch. They are review material, not legal advice, signed terms, a data-processing agreement, or a security certification.
Review draft — not an approved agreement
The configured legal entity is Stunomatic, but every document still needs owner and qualified legal approval.
Open review page →
Terms & renewal
Commercial authority, renewals, suspension, support, and service boundaries.
Acceptable use
Proposed limits for authorized tenants, mail systems, content, and automation.
Subprocessors & DPA
The supplier register, hosting region, transfer mechanism, and DPA status.
Incident response
Reporting channels, notification authority, evidence handling, and exercises.
Security boundary
Implemented local safeguards and the assurance work still required for production.
Data-processing agreement
No approved DPA or transfer addendum ships in this repository. Processor/controller roles, hosting location, subprocessors, security schedule, deletion, audit, international transfer, and liability terms require the selected infrastructure and qualified review.