YOUR DATA, YOUR RULES
Built for audit — the trail you show your data protection officer.
When an agent processes data inside your systems, each party's legal role depends on the real purposes, decisions and activities. The project records this in the contract and DPA, with an action-level trail, least-privilege access and a brake that does not depend on any third party.
01 · Roles defined by the real case
- Controller and processor roles depend on the activities actually performed. Contract and DPA record purposes, instructions and responsibilities.
02 · Consent per contact
- Recorded per contact; withdrawal is honored in the agent's next action.
03 · Action-level Trail
- The piece you present when internal audit, a data subject or the ANPD asks how data was processed. Generated at execution time, not assembled afterwards.
04 · Approval on the irreversible
- Nothing that touches production, privileged access or anything without a way back runs outside the House Rules. That step is yours.
05 · One-click Brake
- Control that depends on a third party is not control. You switch the agent off instantly, on your own.
06 · Your data stays yours
- When you leave, you take your records and Trail. No data hostage-taking.
Execution governance
- Guardrails protect conversation; governance protects execution. Most agent pilots that stall on security stall here: the concern is not the model, it is the absence of a record of who executed what, with which credential and under which rule. This layer is not on our roadmap — it ships switched on from the first live agent.
- Reference: ANPD's Processing Agents Guide (gov.br/anpd). This page explains technical controls and does not replace legal analysis of the concrete case.
For your DPO
- What is the legal basis for processing? — It depends on the processing: the data subject's consent for contact, and contract performance for what you hired. We record consent per contact in the Trail.
- How long is data retained? — For the period required by the purpose, legal obligations and the contract. On termination, you receive the exportable records and operational data is deleted under the applicable agreement.
- Who are the processors involved? — The infrastructure and messaging providers used by your agent, listed in the processor agreement. Nothing beyond what you approve in the House Rules.
- What if there is an incident? — The Trail preserves the action records, the Brake stops execution and we notify the client to follow the response plan, applicable law and contract.