Roles
For customer decision records and workspace data, the customer is the controller or business and DecisionsLayer is the processor or service provider, unless a signed agreement states otherwise.
Processing scope
Processing includes ingestion, storage, search, timeline reconstruction, observability metrics, anomaly and alert evaluation, intelligence analysis, optimization workflows, support, security, and deletion/export operations.
Customer instructions
DecisionsLayer processes customer data according to the agreement, product configuration, API requests, support instructions, and documented security obligations.
Subprocessors
Before production launch, publish subprocessors for cloud hosting, email delivery, analytics, support, and payment processing. Keep this list current and notify customers of material changes.
Deletion and return
Customers should be able to request deletion or export of workspace data subject to legal retention requirements, backup windows, and security logs.