Data processing

When your organisation uses the OBLIGO platform, Obligo processes the personal data contained in the contracts, documents, and records you bring into the platform strictly on your organisation's documented instructions, for the purpose of obligation management. The executed DPA sets out the subject-matter and duration of processing, its nature and purpose, the categories of data subjects and personal data, and the obligations of each party.

Under the DPA, Cybersol B.V. applies technical and organisational security measures, engages sub-processors only under equivalent obligations, supports your organisation's responses to data-subject requests and supervisory authorities, and processes data only on your documented instructions. The specific security measures, sub-processor list, retention, and return-or-deletion terms are set out in the executed DPA and its annexes.

To request the current data processing agreement or ask a processing question, contact legal@obligo.tech.