Data Processing Agreement (DPA)

For personal data about tenants, guarantors and other third parties that the customer uploads, the customer is the controller and Tekniti (Tekniti.AI Ltd) is the processor. Tekniti processes that data only on the customer's documented instructions, which these terms and the customer's use of the product constitute.

Subject-matter: provision of the Tekniti compliance platform. Categories of data subject: tenants, guarantors, landlords, contractors and the customer's staff. Categories of data: contact details, tenancy and financial records, correspondence, and compliance documents.

• Process personal data only on your documented instructions.
• Ensure persons authorised to process it are bound by confidentiality.
• Implement appropriate technical and organisational security measures (encryption in transit and at rest, access controls, a hash-chained audit log, hosting in AWS eu-west-2).
• Assist you with data-subject requests, breach notification, and DPIAs.
• Notify you without undue delay on becoming aware of a personal-data breach.
• Delete or return personal data at the end of the service, subject to legal retention requirements.

We use vetted sub-processors including Amazon Web Services (hosting, eu-west-2), Amazon SES (email), Stripe (payments) and Anthropic / AWS Bedrock (AI inference). We remain responsible for their compliance and will give notice of changes so you can object.

Personal data is stored in the UK/EU (AWS eu-west-2). Where a sub-processor transfers data outside the UK, it is protected by appropriate safeguards (e.g. UK IDTA / Standard Contractual Clauses).

We help you meet access, rectification, erasure and portability requests. You can export data or request account erasure at any time (Settings → Data & privacy). Statutory records (audit and financial) are retained for the periods UK law requires.