All customer data is stored in the EU. Language models run in the EU. For how the data is protected, see Security.
Roles#
- You are the controller. Pareo is the processor under Art. 28 GDPR.
- Pareo processes your data only on your instruction.
- Requests from data subjects go to you. Pareo provides the tools to answer them.
Where data is stored and processed#
| Purpose | Provider | Location |
|---|---|---|
| Hosting, database, files, backups | Google Cloud | Belgium |
| Language models | AWS Bedrock | EU |
| Text analysis for search | Google Vertex AI | Belgium |
| Amazon SES | EU (Ireland) |
Two lookups run outside the EU. PubChem (US) receives chemical substance names to return CAS numbers, and nothing else. Brave Search (US) receives web search queries, only if your organisation adds its own API key.
Full list: Subprocessors.
Personal data we hold#
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| User name and email | Sign-in, notifications | Contract | Account lifetime |
| Invitation email | Onboarding | Contract | Account lifetime |
| Customer contact name and email | Correspondence | Legitimate interest | 10 years |
| Sender and content of inbound requests | Request processing | Legal obligation | 10 years |
| Authorised signatory name, email, phone | Declaration signing | Legal obligation | 10 years |
| Sender and content of supplier replies | Data extraction | Legal obligation | 10 years |
| Outreach messages | Record of requests sent | Legitimate interest | 10 years |
| Assistant chat messages | Assistant conversations | Legitimate interest | 1 year |
| Agent run histories | Processing and troubleshooting | Legitimate interest | 90 days after the run |
| Audit log: email, IP address, browser | Security | Legitimate interest | 90 days |
The 10-year period follows the record-keeping requirements of REACH and RoHS.
Erasure#
- On your instruction, Pareo erases all personal data of your organisation.
- When your organisation is deleted, all its stored files are deleted too.
- Database backups expire after 7 days, and older file versions after 90 days. Erased data is then gone from them too.
- Every erasure is recorded in the audit log.