Service Offerings
Cloud Platform Email Product Privacy Notice
Processing via an AI tool available with the Product ☐ yes ☒ no
* (n/a = not applicable)
**(optional; depends on the Customer’s configuration of the system, the connection to other systems, and the categories chosen by the Customer to be collected from Third Party Users)
| Categories of Personal Data | Categories of Data Subjects | Purpose of Processing | Categories of Data Recipients | Needed for Core Features | Processing Location | Acquia Inc. acts as Processor |
|---|---|---|---|---|---|---|
| Email Addresses | Through the configuration, design, and administration of their own Drupal application, Customer in its sole discretion determines and controls the categories of data subjects collected by their Drupal Application and is used for purposes of sending emails through Acquia Cloud Platform Email. Primarily, these would be Customer’s end-users including visitors to Customer’s website. | Provision of the Services by Acquia to Customer | Yes | Emails are routed and logs are stored in the us-east-1 region | Yes |
| Objective | Technology / Measure | Data at Rest | Data in Transit |
|---|---|---|---|
| Anonymization and Pseudonymization | To and From email addresses are logged for troubleshooting/support purpose which are in pseudonymization format | pseudonymization format | pseudonymization format |
| Data confidentiality | Data confidentiality is managed through least privilege including ACLs, encryption, two-factor authentication, strict password protocols, configuration management, and security monitoring and alerting software | Encrypted format | TLS |
| Data integrity | TLS is used for data in transit. TLS uses encryption to ensure privacy, so that other parties can’t eavesdrop or tamper with the messages being sent | Encrypted format | TLS |
| Data availability including restoring availability, restoring access to personal data, and data resilience | Data backup and restore process is used with the Point-in-Time Recovery method for database. Application is deployed considering high availability with multi AZ for business continuity. | N/A | |
| Regular testing, assessing and evaluating of TOMs | Qualys compliance scanner & ClamsAV are used for security; processes are reviewed periodically as per Fedramp compliance regulation. | N/A |
Data importer has implemented and will maintain appropriate administrative, physical, and technical safeguards for the protection of the security, confidentiality and integrity of Personal Data uploaded to the Services, as described in the Acquia Security Annex (available from https://www.acquia.com/about-us/legal/gdpr) applicable to the specific Services purchased by data exporter, as updated from time to time, and made available by data importer upon request. The data exporter is wholly responsible for implementing and maintaining security and data administration within any data exporter applications, configuration settings, or log settings used by the data exporter in conjunction with the Services.
If this content did not answer your questions, try searching or contacting our support team for further assistance.
If this content did not answer your questions, try searching or contacting our support team for further assistance.
Service Offerings