1. Parties and roles
The customer is the responsible party (POPIA) for personal information it loads into TrustLedger. Chibase Consulting, trading as TrustLedger, is the operator / processor for that information while the workspace is live.
2. Purpose
Processing is limited to providing the TrustLedger workspace: grievance desk, entitled Stakeholder Intelligence modules, billing, and operator support. We do not sell customer content and do not use it to train external foundation models.
3. Instructions
We process only on documented instructions: product use, support tickets you open, and legal obligation. AI Assist only suggests; a human must apply before anything is saved.
4. Security
Live access is bound per organisation on the server (Plan Owner and accepted Cloud teammates). Platform operators are allowlisted. Connections are encrypted in transit. This is not a dedicated private cloud unless an Isolation order is in force.
5. Subprocessors
Current processors are listed at /legal/subprocessors. Material changes will be posted there.
6. Retention and deletion
After a verified deletion request, the target to complete purge of Customer records and linked Cloud Users is 30 days, unless a longer legal hold applies. Browser-only trial data is deleted by clearing that device; it is not a Cloud Customer until provisioned.
7. International transfers
Some processors may store or process outside South Africa. The subprocessors page states the role of each. Contact us if a residency constraint requires an Isolation quote.
8. Execution
Replace this paragraph with signature blocks when a Project or Institutional order includes the Trust Pack. Until then, this page is information only. Full operator copy: docs/DPA_TRUST_PACK.md.