How Trisova processes your organisation's data

• Purpose: providing Trisova to your organisation for the term of its contract.
• People: your staff and contractors; your suppliers' contacts and key people; people involved in incidents, inspections and training records; anyone else your organisation chooses to record.
• Data: names, work contact details, roles, records your organisation creates (assessments, incidents, contracts, training, documents and photos), and sign-in and audit records. Health and safety records may include health data about injuries; your organisation decides whether to record it.
• Duration: the contract term, then until deletion as in section 8.

• Process the data only on your organisation's documented instructions (the contract, these terms and how you use Trisova), unless the law requires otherwise, in which case we'll tell you first where we're allowed to.
• Make sure everyone at Trisova who can access the data is bound by confidentiality.
• Keep appropriate security in place (section 4).
• Help your organisation answer requests from the people in the data, and with security, breach notification, impact assessments and consultations with regulators, as far as Trisova's role allows.
• Tell your organisation if we think an instruction breaks data-protection law.

Your organisation authorises the services on the sub-processors page. Trisova binds each to data-protection terms at least as protective as these and stays responsible for them. We'll give at least 30 days' notice by email before adding or replacing one; if your organisation objects on reasonable grounds and we can't resolve it, it may end the affected service.

• Data stored in the EU (Ireland) and encrypted when stored and in transit.
• Each organisation's data separated by access rules in the database itself.
• Access inside your organisation limited by area and part of the group; two-factor sign-in for owners and admins; an audit log of important actions.
• Only named people at Trisova can reach customer data directly, and only to support or fix the service.
• Error reports exclude names, emails, cookies and sign-in details.

Where a sub-processor handles data outside the UK or EU (the AI provider and the email-sending service, both in the United States, and only when those features are used), the transfer is covered by the UK International Data Transfer Addendum and the EU standard contractual clauses, or an adequacy decision where one applies.

Trisova will tell your organisation without undue delay, and within 48 hours of becoming aware, of a breach affecting its data, with what we know and what we're doing, so your organisation can meet its own 72-hour duty to regulators.

Trisova will provide the information needed to show it meets these terms, including answers to security questionnaires, and allow reasonable audits with 30 days' notice, at most once a year unless a regulator requires or a breach justifies more.

Owners and admins can download all of your organisation's data at any time from Settings (most screens also export their own records). When the contract ends, or when you switch provider (see the switching section of the terms), Trisova keeps it available to download for at least 30 days. Then Trisova deletes it, including from any backups within their normal cycle, unless the law requires us to keep some of it, and confirms the deletion on request.

Data-protection questions: hello@trisova.com.