How are data subject rights implemented?
amaise supports the full implementation of data subject rights according to GDPR and nDSG:
Access: Data belonging to a data subject can be identified and provided using the application’s data export features.
Correction: Data can be corrected within the application.
Deletion: A documented 8-step deletion process covers all storage layers — S3, database, search indexes, and encryption keys.
Data portability: Data can be exported using the application’s export features.
Restriction of processing: Tenants can be deactivated within the application.
The deletion process includes: S3 data (all versions), database entries (hard delete), search indexes, and the scheduled deletion of the tenant-specific encryption key. Deletion is confirmed to the customer upon completion.