Data Processing

What we process

VaultLayer processes the operational data required to monitor, diagnose and remediate websites you connect — including site metadata, inventory signals, monitor results, findings, remediation previews, evidence packs and account administration details.

We do not sell customer data. We do not use customer website content to train public foundation models.

Roles

For customer account and billing data, VaultLayer (SquareCode UK Limited) acts as an independent controller. For operational telemetry and content derived from sites you connect, we typically act as a processor on your documented instructions.

Contracts

Enterprise buyers can request a Data Processing Agreement (DPA), including UK GDPR / GDPR schedules and subprocessors. Contact legal@vaultlayer.co.uk.

• Lawful bases and retention described in Privacy
• Subprocessors listed in the Trust Centre
• Deletion and export available from account controls and on written request