The contract your legal team asks for
Signed automatically when you accept the terms, and available as a countersigned PDF on request. Annex I lists every sub-processor and the region it runs in.
You are the controller, we are the processor. We only process what you instruct, using the sub-processors in Annex I, inside the EU unless you allow otherwise. We tell you about a breach within 24 hours.
Roles and scope
You are the data controller for everything your flows process. Channelflow SL is the processor, acting only on your documented instructions — which in practice means the flows, prompts and sources you configure in the product.
Our instructions are your configuration
We do not process your content for any purpose you did not set up. That includes model training, product analytics on content, and support access: an engineer can only read your content after you grant time-boxed access from the security page, and every such access is logged and shown to you.
Sub-processors · Annex I
Changes are announced 30 days in advance; you can object in writing, and if we cannot resolve it you may terminate without penalty for the remainder of the term.
Security measures
The technical and organisational measures that survive contact with reality, not a longer list that does not.
Breach notification
If we become aware of a personal data breach affecting your data we notify you within 24 hours, with what we know, what we do not yet know, and what we are doing. We do not wait until the picture is complete.
International transfers
Default processing is EU-only. Where a sub-processor requires a transfer outside the EEA we rely on the European Commission’s standard contractual clauses plus a transfer impact assessment, both attached as Annex II.
Audits, return and deletion
You can audit once a year on 30 days’ notice, or accept our penetration test summary and SOC-style control description instead. On termination we return or delete your data at your choice, and confirm the deletion in writing within 30 days.