Data Processing

1. Roles

When you use InletOps to process inbound email, you act as the controller of that data and InletOps acts as your processor, handling data according to your instructions and this addendum.

2. Scope of processing

We process the categories of data necessary to provide the service: account data, configuration, and the inbound messages and attachments you route through the platform.

3. Subprocessors

We use a limited set of infrastructure subprocessors to operate the service. Each is bound by data-protection obligations consistent with this addendum. We maintain a current list available on request.

4. Security measures

We apply encryption in transit, access controls, audit logging, and configurable retention. Attachments are scanned for malware before delivery.

5. Retention and deletion

You control retention settings for messages and attachments. On termination, we delete or return data in line with your settings and applicable law.

6. International transfers

Where data is transferred across regions, we rely on appropriate safeguards consistent with applicable data-protection law.

7. Assistance

We provide reasonable assistance with data-subject requests, security inquiries, and incident notification as described in your agreement.