Data processing
with clear roles.
This page summarizes processing responsibilities between the customer (controller) and OctaBMS (processor) for tenant data.
Controller vs Processor
Customers decide what data is entered and why. OctaBMS processes that data according to documented instructions.
Processing scope
Processing is limited to delivering the contracted service.
Subject matter
Invoicing records, payments, client profiles, and workflow metadata.
Duration
For the active subscription period, plus retention required by law or contract.
Nature
Collection, storage, retrieval, export, and secure deletion of tenant data.
Purpose
Operate billing features, compliance reporting, and authorized support.
Security and rights
Operational and legal safeguards are part of the service design.
• Appropriate technical and organizational measures are used to protect tenant data.
• Access is controlled using role and permission boundaries at tenant scope.
• Sub-processors, if used, are required to maintain equivalent protection standards.
• Customers may request support for correction, export, or deletion workflows as applicable.
• Incident handling follows documented response procedures and communication channels.