GDPR Compliance

English is the sole legally binding language of IOSOR legal documents. Summaries in other languages are for convenience only.
Roles of controller/processor, client responsibilities for recipient data, and GDPR-oriented commitments.
IOSOR — GDPR COMPLIANCE NOTICE
IOSOR — Version 1.0.2 | Effective 2026-07-18
Binding language: English
The English language version of these documents is the sole legally binding text. Any summary or UI text in another language is provided for convenience only.

Operator: IOSOR is a B2B omnichannel communications project operated from the Lausanne area, Canton of Vaud, Switzerland. Formal Swiss company registration will be completed in due course; until then these documents refer to the project operator as “IOSOR” or “Provider”.
Contact: support@iosor.com


1. ROLE ALLOCATION
1.1 For Client account user data, IOSOR typically acts as controller (or joint arrangements as required).
1.2 For personal data in Client message content and recipient lists, Client is controller; IOSOR provides transmission/processing infrastructure as a processor/service provider to the extent of technical delivery.
1.3 Client must ensure a lawful basis for each communication to end recipients (e.g. consent or legitimate interest under GDPR/ePrivacy where applicable).

2. PRINCIPLES
We design processing to respect lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

3. PROCESSOR OBLIGATIONS (WHERE WE ACT AS PROCESSOR)
Where we process Client personal data on documented instructions: confidentiality, security measures, subprocessor diligence, assistance with data-subject requests where feasible, deletion/return on end of service subject to legal retention, and information needed to demonstrate compliance.

4. INTERNATIONAL CLIENTS
EU/EEA clients may have additional rights under GDPR. Contact support@iosor.com.

5. RECORDS
We maintain internal records of processing activities appropriate to our scale and will provide relevant information on reasonable written request.

6. BREACH NOTIFICATION
Security incidents with personal-data risk are assessed and notified to authorities and affected parties where legally required.

7. DPA
A separate Data Processing Agreement may be executed with enterprise Clients on request.

8. ENGLISH PREVAILS
The English language version of these documents is the sole legally binding text. Any summary or UI text in another language is provided for convenience only.