Skip to content

Inside your borders.

Your record, your documents and your logs stay in your country. Where a model runs is said plainly, workflow by workflow, and you see it before anything is built.

What does inside your borders mean?
The record, the logs and the documents are stored and processed in your country. It is not a promise that nothing ever leaves: where a model runs abroad, we say so before anything is built.
Fig 6.1What stays in the country, and the one thing that leavesEverything inside the frame stays in your country: the record, its documents, its log and the systems it reaches. The orange wire is the one call that crosses the border, to a model abroad.

Your country: the record, its documents and its log kept inside it, its e-invoicing and customs reached from inside, and one call crossing the border to a model abroad, under paper agreed with you.

Where does the model run?

Where your data is kept is one answer. Where the model that reads it runs can be another, and it is the one most often left out. We give both, for each workflow, before anything is built.

Operations data is the most sensitive data a company has. We treat it that way by default.

How your data is handled

YOUR COUNTRYPHOTO OF A DELIVERY NOTERECORDShort delivery, one cartonDOCUMENTSThe photo, as it cameLOGRead, written, by the agentTHE PLACE: AGREED WITH YOU IN WRITING

Kept together, in your country

The record, the documents it was written from and the log of every action are kept in one place, in your country. Where exactly is agreed with you in writing, before anything is built.

    ONE ORDER, AS THE RECORD HOLDS ITCUSTOMERA caterer, SoharCONTACTName and phoneITEMSGhee, oil, riceAMOUNTWithin limitPersonal dataTHE MODEL FOR THIS WORKFLOWIN WRITING, BEFORE GO-LIVEWhat the model readsWhich of it is personalWhich modelWhere it runs

    Each workflow's model, said plainly

    A model reads the work in order to do it. Before a workflow goes live you get it in writing: what the model reads, which of it is personal data, and where that model runs.

      RECORDOrdersInvoicesPaymentsLOGSALES MANAGERSales manager read OrdersFINANCEFinance read PaymentsORDERS AGENTOrders agent wrote Orders

      Read only by the people you name

      Each person and each agent reads the part of the record their work needs, and nothing else. Every look and every change is a line in the log, so you can see who read what, and when.

        YOUR COUNTRYOutside the countryRECORDDOCUMENTSLOGWhat the workflow needsTHE BORDERPaper agreedA MODEL ABROAD

        Nothing crosses without paper

        Nothing leaves your country unless a workflow needs it and you have agreed to it. Each country asks for its own paper before personal data crosses its border; we prepare it with you.

          What legal and IT teams ask

          Where does the model run?

          Where we tell you, workflow by workflow, before anything is built.

          Our bank has rules about our data. Do they apply?

          Some sector rules reach your suppliers as well as you. Bring them, and the deployment is built inside them.

          What paper do we need to send anything abroad?

          It differs by country and by the kind of data. We prepare it with you, country by country, before anything is sent.