Skip to main content

Roles and Responsibilities – You and Sally AI

Roles​

  • Sally AI = Data Processor: processes personal data only on documented customer instructions; no use for our own purposes; no AI training on customer data.
  • Customer = Data Controller: defines purposes and means; selects the lawful basis; informs end users.

Your Responsibilities (Customer)​

  • Lawful basis & notices (consent where required), transparent end-user information
  • Data subject rights (access, deletion, etc.): decide and respond to individuals
  • Instructions: issue, adjust, and approve processing instructions

Our Obligations (Sally AI)​

  • Process solely for the agreed purpose in EU data centers
  • Support for data subject requests: without undue delay, no later than 5 business days (as per the DPA)
  • Security (TOMs), logging, and incident notification workflows
  • No independent use of data; subprocessors engaged per the DPA

Data Protection Contact​