Data retention policy
The time period for which Ascendo.ai must retain customer data depends on the purpose for which it is used. Ascendo.ai must retain customer data for as long as an account is active or in accordance with the agreement(s) between Ascendo.ai and the customer, unless Ascendo.ai is required by law to dispose of data earlier or retain data longer.
Data archiving and removal policy
Ascendo.ai must dispose of customer data within 30 days of a request by a current or former customer or in accordance with the Customer’s agreement(s) with Ascendo.ai. Ascendo.ai may retain and use data necessary for the contract such as proof of contract in order to comply with its legal obligations, resolve disputes, and enforce agreements. Ascendo.ai hosting and service providers are responsible for ensuring the removal of data from disks allocated to Ascendo.ai use before they are repurposed and the destruction of decommissioned hardware.
Only a limited number of Ascendo.ai employees should have access to delete customer data.
Upon employee or contractor termination, company-owned devices will be collected and sanitized prior to device re-issuance in accordance with NIST Guidelines for Media Sanitization (NIST S.P. 800-88 Rev. 1).
Data storage policy
Ascendo stores data solely on their target servers and not on any laptop or portable device (unless there is explicit written permission from customer). Ascendo uses Amazon AWS and Google GCP as the preferred cloud service providers.
App/service has sub-processors
yes
Guidelines for sub-processors