1 . Roles
For customer business data, the customer acts as the data controller and SA100 acts as a data processor or service provider, as applicable.
Legal
Data Processing Policy
How SA100 processes customer and website data for SA100 Construction ERP.
2 . Processing purpose
We process data to host the application, provide features, import data, maintain security, perform backups, troubleshoot issues, deliver support and improve service performance.
3 . Data categories
Processed data may include user details, employee or labour records, vendor information, project records, financial entries, machine logs, documents, media and system activity logs.
4 . Sub-processors
We may use cloud hosting, email, SMS, storage, analytics and support providers. These providers are engaged only for service delivery and are expected to apply appropriate safeguards.
5 . Security measures
Measures include encrypted connections, role-based permissions, audit logs, controlled access, backup routines and operational monitoring.
6 . Data location
Customer data may be processed in cloud regions selected by our infrastructure providers. We take reasonable steps to ensure appropriate protection for transferred data.
7 . Deletion
Upon account closure or verified deletion request, data is deleted or anonymised within a reasonable period, subject to backup cycles and legal retention obligations.