QEDARA TRUST CENTER
Your data, its purpose and its lifecycle
A practical guide to the information processed by QCM and the documents that govern it.
What QCM processes
Account and membership details; contracts, versions and extracted text; AI requests and results; signing recipient and evidence information; security and usage metadata. The exact data depends on the workflows you use.
Your organisation and Qedara
The published notice describes the customer as controller for uploaded contract content and Qedara as processor on its behalf. The applicable agreement must identify the legal entities, instructions and responsibilities. An NDA protects confidentiality; it does not replace a DPA.
Retention and deletion
The published privacy policy describes contract retention and deletion options. For procurement, confirm the retention schedule applicable to your service, including signed evidence, backups and legal holds. A configured retention period does not prove that a deletion job has run.
Rights and requests
Use the product export/deletion facilities or the contact channel in your agreement for assistance. Identify the affected workspace and request, without sending credentials or unnecessary contract content. Requests require appropriate identity verification.
Impact assessments
A service-level privacy assessment supports your review. Your organisation determines the legal basis and whether its intended use requires a DPIA, particularly for sensitive data or high-risk processing.