1. Status of this page
This is a summary, not the agreement itself. A Data Processing Agreement is the document your legal counsel will read line by line, and publishing a draft that has not been through legal review would be worse than publishing none. Ask us and we will send the current version.
2. Who is controller and who is processor
For your account data, Scrivio is the controller. For the content you upload — the recordings and the transcripts made from them — you are the controller and Scrivio acts as your processor, handling that material on your documented instructions and for no other purpose.
3. What is processed
Subject matter: transcription of audio and video and the tools around it. Duration: for as long as your account exists, subject to the retention period in the Privacy Policy. Categories of data subject: whoever appears in your recordings. Categories of personal data: voice recordings, their transcripts, and whatever those contain — which may include sensitive personal data, depending entirely on what you upload.
4. Sub-processors
The current list is published on the Sub-processors page. We will inform you before adding a new one and give you a reasonable opportunity to object.
5. Technical and organisational measures
Encryption in transit, Argon2id password hashing, per-request authorisation checks on every transcript, private-network isolation between internal services, Swiss-only data location, and access to production limited to the people who need it. Detail is set out in the agreement itself.
6. Assistance with your obligations
We assist you with data subject requests, with data protection impact assessments where relevant, and with breach notification — we will inform you without undue delay if a breach affects data we process for you.
7. Return and deletion
You can export your content at any time from the application. On termination, deleting your account erases the content we hold for you as described in the Privacy Policy.
8. Requesting the DPA
Write to the address on the Contact page, telling us your organisation's name and who should sign. We will send the current version.