Compliance

GDPR

This page summarizes how Velis approaches GDPR-aware product behavior and how customers should think about data protection responsibilities in the platform.

Last updated

15 April 2026

Product approach

Velis is being built to support controlled access, traceability, retention-aware workflows, and safer handling of customer data across agency operations.

The product direction is to make privacy-aware workflows easier to run, not to transfer legal accountability away from the customer organization using the service.

Roles and responsibilities

In most customer workflow contexts, the customer decides why and how personal data is used in its own business processes, while Velis provides the software and supporting services needed to operate the platform.

Exact controller and processor allocations depend on the final contractual and factual setup and may differ for product operations, support, security, or direct website interactions.

Rights and requests

Data subject requests should usually be directed to the organization that collected the information in the first place. Velis can also be contacted for service-level privacy questions, security concerns, or requests related to its own direct interactions.