Our role
For website visitors and business contacts, Dynomo generally acts as controller. When Dynomo processes personal data inside the platform on a customer’s instructions, the customer is normally the controller and Dynomo acts as processor. The customer agreement and data processing agreement define those roles for each deployment.
Platform safeguards
- Role-based access and separation of customer environments.
- Policy controls that can classify, allow, mask, omit, tokenise, or block fields at defined boundaries.
- Execution and audit records designed to show how data moved and which policies were applied.
- Encryption in transit and at rest where supported by the selected deployment architecture.
- Documented incident, access, retention, export, and deletion procedures.
Residency and subprocessors
EU-hosted deployment options are available. The agreed hosting region, subprocessors, transfer safeguards, and customer-specific instructions are recorded in the applicable agreement and data processing documentation. Website suppliers may differ from platform subprocessors.
Data subject requests and incidents
Dynomo supports customers with appropriate technical and organisational measures for data-subject requests and personal-data incidents. Customers remain responsible for determining the lawful basis, purpose, and retention rules for data they control.
Documentation
A customer-specific data processing agreement, subprocessor information, and security documentation are available during contracting. Contact hello@dynomo.eu to request them.