Compliance
GDPR, explained
The regulation is built on a small number of ideas that recur throughout it. Processing needs a lawful basis. It must be limited to a stated purpose and to the data that purpose actually requires. It must be transparent to the people whose data it is, who hold enforceable rights over it. And it must be secured, with the measures proportionate to the risk.
How Enclessa uses it
Enclessa is built for GDPR rather than certified against it: hosted in the European Union, sold by a German company, with a data processing agreement, retention per organisation, team and room, full organisation export and a data-subject export in the People module. Enclessa is the processor for customer content and the controller for its own account, billing and website data. Enclessa holds no compliance certification of any kind.