Roles

For the records a customer keeps in its workspace, the customer is normally the controller and we are its processor (or a sub-processor where the customer acts for someone else). We process that data only on the customer's documented instructions, as set out in the data processing agreement (DPA) signed with each customer.

What the DPA covers

The signed DPA sets out the subject matter, duration, nature and purpose of processing, the types of personal data and data subjects, the security measures, the use of sub-processors, international transfers, help with data subject requests and breaches, and what happens to data at the end of the service.

Tools the service provides for customers

• Workspace data is kept separate per customer organisation.
• Workspace administrators can export supported workspace records as a JSON file. Uploaded files and attachments, and data held in connected external services, are not included and may need a separate return arrangement. The export is not a full backup or recovery service.
• Optional AI features can be left unused; see AI and integrations.

Requests

Customers can request the DPA, or raise a data protection matter, at hello@moksha-one.com with the subject "Data processing". Individuals should contact the business that holds their data; see our Privacy Notice.

Moksha One is a trading name of Moksha Group Limited, a company registered in England and Wales (company number 13188223), registered office 128 City Road, London, EC1V 2NX, United Kingdom. Contact: hello@moksha-one.com.