1. Processor & Controller Boundaries
In enterprise client engagements, the client operates as the Data Controller, while Syntamatic Digital acts as the Data Processor. We process data strictly in accordance with documented client instructions and agreed engagement scopes.
2. Sub-Processor Governance
We maintain strict oversight of all third-party cloud infrastructure and tooling providers. Sub-processors are subjected to rigorous security assessments and bound by data protection obligations equivalent to those governing Syntamatic.
3. Incident Response & Breach Notification
In the event of a verified data incident impacting client information, Syntamatic maintains established protocols to notify affected clients without undue delay, providing comprehensive incident telemetry and mitigation runbooks.
4. Post-Engagement Data Sanitization
Upon completion of client engagements, all temporary staging datasets, development tokens, and diagnostic snapshots are securely purged in accordance with DoD 5220.22-M or NIST 800-88 sanitization standards.
Compliance & Inquiries Desk
If you have operational compliance questions or require a signed Data Processing Addendum (DPA) or NDA for an upcoming initiative, please contact our legal desk at inquiries@syntamatic.com.