Data processing and hosting
Status can run in customer-operated infrastructure or a Vacay-operated environment. Confirm the actual arrangement for your instance before relying on a processing-location or recovery commitment.
Where information is processed
The application stores questionnaire configuration, assignments, answers and calculated results. Dashboard processing can also use a data warehouse. An optional identity vault separates identifying information from central pseudonym-based records; see Security and privacy.
Identity providers and notification services are additional processing boundaries. An email address and delivery metadata may be needed to deliver a message. Do not include questionnaire answers or other sensitive clinical content in notification text unless explicitly approved for that channel.
Deployment responsibilities
| Area | Customer-operated installation | Vacay-operated installation |
|---|---|---|
| Hosting, network and storage | Customer, unless separately commissioned | As specified in the service agreement |
| Identity provider and account lifecycle | Organization's identity administration | Organization's identity administration and agreed integration |
| Software updates | Vacay supplies agreed updates; customer coordinates installation | Managed under the service agreement |
| Backups and recovery | Customer's operating procedure | Agreed backup scope and recovery commitments |
| Processing region and suppliers | Customer's chosen environment | Applicable contract and supplier list |
The existing standard Vacay Cloud EU product profile describes a German hosting location. The agreement and current supplier annex for your installation are authoritative; this is not a claim about every possible deployment.
Transport, storage and deletion
Use HTTPS for production web and API access. Internal connections also need protection through the agreed network and transport controls. Encryption at rest, backup encryption, retention and recovery times are infrastructure settings, not guarantees implied by the presence of a browser padlock.
Deleting a resource in the application does not establish when every backup or exported copy is removed. Ask the operator about retention across the application, warehouse, logs, backups and exports.
Information to request from your administrator
- The processing region, operators and applicable supplier list.
- Identity-provider and multi-factor requirements.
- Storage and backup protection, retention, and tested recovery procedure.
- Enabled integrations, notification channels and diagnostic logging.
- The applicable data-processing agreement and technical and organizational measures.
Do not infer certification or an independent audit from this overview. Request current, scope-specific evidence when your organization requires it.