Legal

Data Processing Statement

Effective June 13, 2026 · Version 1.0

Template notice. This document is template content and should be reviewed by a qualified attorney before public use. It does not constitute legal advice.

1. Scope

This statement describes how Davanji processes customer data uploaded to the platform.

2. Roles

For most data, the customer organization is the data controller; Davanji is the data processor.

3. Types of data processed

User account information (names, emails, role assignments)
EHS data uploaded by the customer (incidents, training records, risk assessments, permits, documents)
Activity log information generated by user actions

4. Subprocessors

We use a small number of subprocessors. Categories include: cloud hosting, payment processing, email delivery, and analytics (when consented). A current list is available on request.

5. Security measures

See our Security Statement for the technical and organizational measures applied to customer data.

6. Customer responsibilities

Customer is responsible for ensuring it has the legal basis to upload personal data of employees, contractors and other individuals into the platform, and for managing user access.

7. Data return and deletion

Within a reasonable period after subscription termination, the customer may request a data export. After the export period, customer data is deleted on the schedule described in the SaaS Subscription Terms.

8. Breach notification

We will notify affected customers of confirmed personal-data breaches within a reasonable time as required by applicable law.

9. Contact

Data-handling questions: support@davanjiehssolutions.com.