Legal
Data Processing Agreement
Last updated July 2026
This summary describes how The Salvus Network Ltd processes personal data on behalf of its customers. A full, signable DPA is available on request and forms part of every customer agreement.
Roles
For personal data processed through the platform, the customer is the data controller and The Salvus Network Ltd is the data processor. We process personal data only on the customer's documented instructions.
Scope of processing
We process the categories of personal data necessary to deliver real-time accountability, typically worker identifiers, tag associations and location reads, for the duration of the customer agreement.
Sub-processors
We use a limited set of vetted sub-processors, each under appropriate contractual terms. The current list is published on our Trust page and we provide notice of changes.
Security & data residency
All customer personal data is processed and stored in the United Kingdom. We maintain Cyber Essentials certification, are working toward ISO 27001, and apply appropriate technical and organisational measures.
Data-subject requests & deletion
We assist customers in responding to data-subject requests and, on termination, delete or return personal data in line with the customer's instructions.
Request the full DPA
To receive the full, signable DPA, email [email protected] and we will send it by return.
Questions about this policy? Email [email protected].