Data Processing Agreement (GDPR/CCPA)

Last updated: November 2026 · QASyn prototype (fictional company for demonstration).

As data controller you determine purposes; QASyn acts as processor for workspace data. Processing occurs only to run your tests and generate evidence. Sub-processors: none in this prototype (fully local).

Data subject rights: export via Reports CSV, deletion via Organisation reset, and audit trails via System audits. Breach notification within 72 hours. CCPA: no sale of personal information.