Legal

Data Processing Agreement

Last updated July 2026

This summary describes how The Salvus Network Ltd processes personal data on behalf of its customers. A full, signable DPA is available on request and forms part of every customer agreement.

Roles

For personal data processed through the platform, the customer is the data controller and The Salvus Network Ltd is the data processor. We process personal data only on the customer's documented instructions.

Scope of processing

We process the categories of personal data necessary to deliver real-time accountability, typically worker identifiers, tag associations and location reads, for the duration of the customer agreement.

Sub-processors

We use a limited set of vetted sub-processors, each under appropriate contractual terms. The current list is published on our Trust page and we provide notice of changes.

Security & data residency

All customer personal data is processed and stored in the United Kingdom. We maintain Cyber Essentials certification, are working toward ISO 27001, and apply appropriate technical and organisational measures.

Data-subject requests & deletion

We assist customers in responding to data-subject requests and, on termination, delete or return personal data in line with the customer's instructions.

Request the full DPA

To receive the full, signable DPA, email [email protected] and we will send it by return.

Questions about this policy? Email [email protected].