Legal

Data processing

Last updated 2026-01-01

How we handle personal data when Regem Global processes it on behalf of a client under a written engagement.

When a DPA applies

If we process personal data for you as a processor, the data processing terms in your MSA, SOW or standalone DPA govern. This page is a summary, not a substitute for that agreement.

Instructions

We process personal data only on documented client instructions, unless law requires otherwise, and we maintain confidentiality for personnel who handle that data.

Subprocessors

We may use vetted infrastructure and tooling providers. Material subprocessors are disclosed in the engagement paperwork and updated when they change.

Security

We apply technical and organisational measures appropriate to the risk of the processing described in the engagement, including access control and secure development practices.