Data Privacy
Understanding what data AD Unlock collects, stores, and protects.
Data Categories
Stored Data
| Data | Purpose | Retention |
|---|---|---|
| Tenant info | Organization identity | Account lifetime |
| Admin users | Portal access | Account lifetime |
| Enrolled users | WhatsApp-AD mapping | Until removed |
| Policies | Approval rules | Until deleted |
| Audit logs | Compliance | Configurable |
| Connector metadata | Status tracking | Account lifetime |
Transient Data
| Data | Purpose | Retention |
|---|---|---|
| OTP codes | Identity verification | 5 minutes |
| Conversation context | Request processing | 15 minutes |
| Job data | Operation execution | Until complete |
Never Stored
| Data | Handling |
|---|---|
| AD passwords | Generated, encrypted, emailed, zeroed |
| WhatsApp messages | Processed, not stored |
| User credentials | OAuth tokens only |
Data Location
Cloud Infrastructure
| Component | Location |
|---|---|
| API | AWS São Paulo (sa-east-1) |
| Database | AWS RDS São Paulo |
| Cache | AWS ElastiCache São Paulo |
| Secrets | AWS Secrets Manager |
Customer Network
| Data | Location |
|---|---|
| Connector binary | Customer server |
| Certificates | Customer server |
| Config file | Customer server |
| Local logs | Customer server |
Data Isolation
Multi-Tenancy
- Row Level Security (RLS) enforced in PostgreSQL
- Every query filtered by tenant_id
- No cross-tenant data access possible
- Separate encryption keys per tenant (future)
Example RLS Policy
CREATE POLICY tenant_isolation ON users
USING (tenant_id = current_setting('app.tenant_id')::uuid);Data Subject Rights
GDPR/LGPD Compliance
| Right | Implementation |
|---|---|
| Access | Export user data via API |
| Rectification | Update via portal |
| Erasure | Delete enrollment |
| Portability | Export in standard format |
Requesting Data
Contact support@adunlock.me with:
- Your organization name
- Authorized requester identity
- Specific request details
Data Retention
Configurable Retention
| Data Type | Default | Configurable |
|---|---|---|
| Audit logs | 90 days | Yes |
| Request history | 30 days | Yes |
| Connector logs | 7 days | Yes |
Deletion
Upon account termination:
- All tenant data marked for deletion
- Deleted within 30 days
- Backup retention: 90 days
- Complete erasure confirmed
Last updated on