Legal
Legal
How we handle personal data, and the terms we work to.
-
Privacy & Data Protection
What personal information we collect through this website, our consultations and the Trellis platform, why, who we share it with, and your rights over it.
For everyone
-
Terms of Service
The standard terms for Trellis and our services: using the platform, your data, intellectual property, warranties, indemnities, confidentiality and publicity.
For Trellis clients
-
Data Processing Agreement
The terms on which we process personal data for organisations that use Trellis, including our sub-processors, security measures and breach commitments.
For Trellis clients
-
Service Level Agreement
Our best-effort service levels for Trellis: availability, support hours and response aims, incidents, and recovery from backup.
For Trellis clients
-
Security
How we protect Trellis and the data in it, and how to report a security vulnerability to us.
- Hosted in an ISO/IEC 27001 certified data centre in Helsinki
- Controls built to Cyber Essentials and the SOC 2 criteria
- Two-factor sign-in, encrypted backups and 14-day patching
- A clear route for reporting vulnerabilities, and no legal action against good-faith research
For clients and researchers
-
Printable handouts
Every document above as a PDF, laid out two A5 pages to an A4 landscape sheet, ready to print or share.
- Privacy & Data Protection PDF · 3.6 MB
- Terms of Service PDF · 3.2 MB
- Data Processing Agreement PDF · 2.5 MB
- Service Level Agreement PDF · 2.5 MB
- Security PDF · 2.1 MB
For everyone
Questions about any of these? Email hello@derros.com.