Legal
A practical summary of how Contrazy supports GDPR-minded operations.
Depending on the workflow, customers, vendors, and service providers may each have different data protection roles.
Vendors are responsible for ensuring they have an appropriate legal basis for the data they collect through Contrazy.
Contrazy uses role-based access, secure transport, and processor integrations designed for production use.
Sensitive payment and identity operations are delegated to specialised providers where appropriate.
Data subject requests should be handled according to your organisation's own privacy process and applicable law.
Keep internal retention, access, and support procedures aligned with the workflows you operate.