GDPR and data processing
Controller and processor roles, privacy information, data-subject rights and the DPA review route.
Use this pack for initial vendor due diligence, internal approval and supplier onboarding. It separates published information from details that need to be confirmed for your plan and configuration.
Review status
For exact data locations, named subprocessors, recovery objectives or contract SLAs, send the requirements to the Zektrx team before approval.
Send Procurement RequirementsDue diligence index
Each section links to the full public source. Items marked for confirmation depend on the chosen plan, enabled services or contractual requirements.
Controller and processor roles, privacy information, data-subject rights and the DPA review route.
Zektrx uses managed cloud infrastructure. Exact hosting, storage locations and enabled services are confirmed during procurement because configuration can affect the answer.
Operational records, documents and evidence are treated as high-value data. Plan-specific retention, recovery expectations and contractual requirements should be confirmed before rollout.
Company-separated workspaces, role-based access, MFA foundations, encryption in transit, controlled file access, audit history and monitoring.
Public categories cover hosting, storage, authentication, billing, monitoring, AI and enabled integrations. Request the current named list for contractual review.
Public support, status and incident routes are available. Plan-specific priority support, escalation and SLA terms are confirmed in the selected plan or contract.
Start with company setup, roles and one controlled workflow, then phase in documents, safety, workforce, stock and commercial records.
AI features assist authorised users with drafting and automation. Users must review outputs before issue and avoid unnecessary sensitive personal data in prompts.
Contracting entity
Use these details for initial supplier setup. Confirm purchase-order, invoicing and contract details with Zektrx before issuing documents.
Complete the review
Include required data residency, retention, recovery, SLA, subprocessor or security-questionnaire details so the response can be matched to your intended setup.