Status: the agreement is in final review and will be published here as a signed PDF before the first lab enters data. Founding labs receive it before setup. To review the draft now, write to privacy@accreditbook.com.
Parties
The agreement is between your organization, as controller, and AccreditBook, a business name of a corporation existing under the laws of Ontario, Canada, as processor. It applies to personal information in the records your lab keeps in AccreditBook.
What it will cover
- Scope: the personal data in lab records (staff names, competence and training records, user accounts, names in audit and review records) processed only to provide the service and on your documented instructions.
- Confidentiality of everyone with access, and the technical and organizational measures described on the security page.
- Subprocessors: the list at /legal/subprocessors, with 30 days' notice by email to lab owners before a new one is added, and your right to object.
- International transfers: the EU Standard Contractual Clauses (Module 2, controller to processor) and the UK International Data Transfer Addendum, for any processing outside the EU or UK.
- Assistance with data subject requests, security incidents (notification without undue delay), and data protection impact assessments.
- Return and deletion: a full export at any time, and deletion within 30 days after the lab is closed, with backups expiring on their normal cycle.
- Location: processing in the single hosting region confirmed before launch, with transfers for limited support services as listed on the subprocessor page.
- Audit: the documentation in the validation pack and on request, and audits on reasonable notice, at the controller's cost, no more than once a year unless required by a supervisory authority or following a breach.
- Liability: subject to the limitations of liability in the terms of service.
How to sign
The published PDF will be signed on behalf of AccreditBook. Countersign it and return it to privacy@accreditbook.com; it then forms part of your subscription terms.