Privacy Policy
Last updated: October 2026 · (CONFIRM effective date on publish)
1. Who we are & our role
Grantledger provides access-governance software. For the employee/personal data a customer (the “tenant”) manages in the product, the tenant is the data controller and Grantledger acts as a data processor on the tenant’s instructions. Under bring-your-own-database, tenant employee data resides in the tenant’s own database.
2. Data we process
- Account data for tenant administrators (name, work email, authentication data)
- Tenant-managed data (employee records, grants, approvals, audit history) — in the tenant’s own database, encrypted per tenant
- Billing data processed by our payment provider; we do not store full card details
- Operational logs needed to run and secure the service
3. How we use it
To provide, secure, support, and bill the service; to meet legal obligations; and to communicate about the service. We do not sell personal data.
4. Security
Per-tenant envelope encryption (KMS-backed DEKs, rotation), a tamper-evident audit log, MFA for admin roles, and boundary hardening. See the Security & Trust page.
5. Data-subject rights
Grantledger provides tooling for data-subject export, erasure (crypto-shred), consent management, retention/auto-purge, breach notification, and grievance redressal, so tenants can meet GDPR and DPDP obligations. See Compliance. Requests are typically directed to the controlling tenant.
6. Retention
Tenant-managed personal data is retained per the tenant’s configured retention window and auto-purged thereafter. Account and billing records are retained as required for legal and operational purposes.
7. International transfers & sub-processors
(CONFIRM: list hosting region(s), sub-processors, and transfer mechanisms before publishing.)
8. Grievances & contact
Questions about this policy: [email protected]. To raise a formal data-protection grievance about Grantledger, see Data protection & grievances.