ApprovalMax processes personal data as both a Data Controller and Data Processor, as defined in the Directive and the General Data Protection Regulation (GDPR). We are a Data Controller with regard to the client information we process for our own purposes, and we are a Data Processor with regard to all information clients upload to our systems, platforms or software.

​

You may request a Data Processing Agreement (DPA) to govern our processing relationship by contacting our Customer Success team.

All your personal information is protected and we have put in place appropriate physical, electronic, and management procedures to safeguard and secure the data we collect.
​

All information you upload in our app is stored in a database in a secure data centre in Microsoft Azure.
​

ApprovalMax utilises the built-in Microsoft Azure backup service and performs two types of backups:

Backups are stored using the built-in Microsoft Azure data storage.
​

The recovery of customer data is done using the built-in Microsoft Azure capabilities. In a disaster event, backed up data will be made available to users within 6-12 business hours.

​

For questions related to information security, please refer to our Security Portal.