LEGAL
Last updated August 26, 2026
This agreement applies when Enfusionize processes personal information on behalf of a client under an applicable service agreement. The service agreement and documented client instructions define the processing scope.
Roles and instructions
The client determines the purpose and means of processing, and Enfusionize processes information only to provide the contracted services, follow documented instructions, maintain security, and meet applicable legal obligations.
Confidentiality and security
Authorized personnel and service providers are subject to confidentiality obligations. Enfusionize applies proportionate administrative, technical, and organizational safeguards and limits access according to role, purpose, and least privilege.
Service providers and transfers
Enfusionize may use contracted service providers necessary to deliver the services and remains responsible for their data protection obligations within the contracted scope. International transfers use an applicable lawful transfer mechanism when required.
Requests, incidents, and return
Within the contracted scope, Enfusionize will reasonably assist with eligible data-subject requests, security incident response, and compliance inquiries. At the end of services, information is returned or deleted according to documented instructions, retention duties, backups, and applicable law.
Data protection contact
