Transparency
A privacy platform has to be able to answer the questions it asks.
Your records are not used to train or fine-tune any model.
AxaReg is operated as a software platform for organizations subject to Law 151 of 2020.
A Data Protection Officer is appointed.
The distinction matters.
Set out in the same shape the platform asks of a customer.
| Purpose | Legal basis | Categories | Retention | Who can reach it |
|---|---|---|---|---|
| Providing the platform | Contractual obligation | Account name, work email, job title, role, sign-in events | Subscription, then 90 days | The customer's administrators; support on request |
| Holding compliance records | Contractual obligation | Register, DPIAs, agreements, evidence, cases, consent | Until deleted, or 90 days after the subscription ends | Only that organization, and its delegated administrator |
| Security and audit | Legitimate interest | Sign-in attempts, IP address, device string, action history | 12 months for sign-in events; action history for the subscription | Platform operations |
| Support and incidents | Contractual obligation | Whatever the requester includes | 24 months after closure | Support, inside the tenant that raised it |
| Billing | Legal obligation | Organization details, named contact, invoicing records | 7 years, as commercial and tax law requires | Finance |
The platform asks for a name, a work email, a job title and a role.
Every request is confined to one organization on the server before it reaches the database.
Platform data is retained for the life of the subscription and for 90 days afterwards.
A new feature that touches personal data is assessed before release, not after.
A user of the platform is a data subject too.
A request about your employer's compliance records belongs with your employer.
You may also complain to the Personal Data Protection Centre.
Customer data is held in the deployment region agreed with the customer.
This website sets no cookies and runs no analytics.
Two fonts are loaded from Google Fonts.
The platform uses a strictly necessary session cookie.
Signed-in users can read the same position from inside the product.