Data Processing Agreement

This page is a summary, not the agreement. Our Data Processing Agreement forms part of our Terms of Service and of each signed master agreement. A copy is available on request from legal@scrivica.com.

• Your organization is the controller of the study data it puts into Scrivica.
• Star River Partners LLC is the processor and handles that data only on your organization's instructions.
• Star River Partners LLC is the controller of account data (name, work email, sign-in and security records) and of the data from the request-access form.

A small set of providers process data for us. The subprocessors page is Schedule 2 of the agreement and names each provider, what it receives and where. We give 30 days' notice by email before a new subprocessor processes your content, and you may object within 14 days. Data is hosted in the United States.

• All AI calls run on our server. Text sent for an AI feature is not redacted first.
• We send personal data or non-public sponsor information to an AI provider only under a written agreement, under zero data retention terms, and with no training on it. Until we confirm this in writing, use only public or synthetic data.
• The current status is recorded in the service conditions on the subprocessors page.

• Every record belongs to an organization, and database row level access controls keep organizations apart.
• Sign-up is invite-only. Roles limit what each person can do. An optional second factor can be required by an organization admin.
• The audit trail is append-only. Signed documents are frozen by database guards.
• File storage is private. Customer AI keys are encrypted at rest. Connections are encrypted.
• Platform staff support access shows metadata only, needs a recorded reason, is time-limited, logged and shown to your admins. Seeing content needs a time-limited grant from your admin.

We notify your organization of a personal data breach without undue delay and within 48 hours of becoming aware of it. What is built, planned and not held is listed on the security page. To report a security concern write to security@scrivica.com.

• An organization admin can download everything as one export from Settings, Export Data, at any time, including after the organization is locked.
• After the term your organization is read-only for a 30-day export period, then locked, then deleted 90 days after the term ends, unless your contract says otherwise.
• An organization admin can request deletion in Settings, with a 30-day cancellable grace period. When the organization is deleted, its rows, its stored files and its whole audit trail are deleted. Export the audit trail first if you need it.
• Backups expire within 35 days after deletion.

More detail is in the Privacy Policy.

Write to legal@scrivica.com.