Overview
Public overview, current DPA status and available review resources.
Review sectionCONTRATO DE PROCESSAMENTO DE DADOS
Processamento de dados para mensagens governadas
Esta visão geral pública explica como o Verbum aborda o processamento de dados do cliente para mensagens governadas. Ela não é um DPA assinado, não publica termos de countersignature e deve ser usada para preparar revisão jurídica, de privacidade ou procurement qualificada.
PROCUREMENT REVIEW MAP
Review data-processing posture in one pass
Use this hub to identify what is public today, what requires qualified legal review and which materials support DPA, privacy and security assessment.
Data Categories
Customer, workspace, messaging, AI, audit, billing and review data at a glance.
Review sectionProcessing Activities
Compact matrix covering activity, data, purpose, retention reference and safeguards.
Review sectionSecurity Safeguards
Public control overview and qualified security-package path.
Review sectionInternational Transfers
Transfer context stays subject to approved contract, DPA or qualified legal review.
Review sectionReview Process
How legal, privacy and procurement teams request DPA and security review.
Review section
1. Propósito
Esta página descreve como o Verbum aborda o processamento de dados do cliente em conexão com a prestação de sua plataforma de mensagens governadas.
Clientes que necessitam de um Contrato de Processamento de Dados formal e assinado devem usar o caminho jurídico/privacidade no formulário de contato.
It is not a customer compliance determination, does not guarantee that privacy or security risks are eliminated and does not create a hosting-region commitment.
Formal DPA status
A formal DPA is reviewed through the legal process when available for the applicable contracting scope.
This public overview does not publish a DPA version, effective date, signatory entity, transfer mechanism or countersignature workflow.
- Available now: this Public Data Processing Overview, Privacy Policy, Security Overview, Trust Center and Subprocessors page.
- Applicable contracting scope, DPA terms and transfer commitments are confirmed only through the legal process.
- Confidentiality: non-public terms, evidence or deployment-specific details may require NDA or an appropriate confidentiality process.
- Request path: use Request DPA review and include your company, use case, contracting context and procurement deadline.
4. Dados do cliente
Os dados do cliente processados pela plataforma podem incluir: informações de conta e espaço de trabalho; dados de perfil de usuário e equipe; configuração e metadados de canal; conteúdo de conversa e histórico de mensagens; contexto de rascunho de IA; ações de aprovação; logs de auditoria; e informações de cobrança e contato.
Os clientes retêm a propriedade de seus dados a qualquer momento. O Verbum processa os Dados do Cliente apenas para operar e fornecer o Serviço.
- Account, workspace, company and user profile data.
- Conversation content, message history, contact identifiers and channel metadata.
- AI prompts or inputs, generated drafts, summaries and configured workflow context.
- Approval decisions, reviewer identity, timestamps, rules and audit events.
- Billing metadata, support messages, procurement communications and privacy request metadata.
- Security logs, access metadata, session information and incident investigation context.
5. Atividades de processamento
O Verbum processa os Dados do Cliente para: rotear mensagens; gerar rascunhos assistidos por IA; gerenciar fluxos de aprovação; manter registros de auditoria; autenticar usuários; processar transações de cobrança; fornecer suporte ao cliente; e melhorar a confiabilidade da plataforma.
O Verbum processa contexto de mensagens, entradas de rascunhos de IA, registros de fluxos de aprovação e histórico de auditoria para que clientes operem mensageria assistida por IA conforme suas instruções e controles configurados.
Verbum does not use customer business messages to train public AI models unless explicitly stated and contractually allowed.
Customer message content is processed to provide configured AI-assisted drafting, routing, review and Verbum Automate workflows.
Customer message content is not used to train public or general-purpose AI models unless explicitly stated and contractually allowed.
Fine-tuning or training on customer message content requires explicit written authorization in the applicable agreement.
AI subprocessors may process prompts, message context and outputs only to provide the configured service, subject to applicable provider terms and approved customer configuration.
Retention of prompts, outputs and related workflow context follows the applicable workspace settings, plan terms, provider configuration, DPA, order form or written agreement.
ENTERPRISE PROCESSING MATRIX
Processing activities and safeguards
A compact matrix for legal, procurement and privacy teams to review processing activity, data categories, purpose, retention reference and safeguards. An approved contract, DPA or written agreement controls where applicable.
| Processing activity | Data categories | Purpose | Retention reference | Safeguards/security | Review note |
|---|---|---|---|---|---|
| Account and workspace administration | Account, workspace, user profile and access metadata. | Administer workspaces, users, roles and account settings. | Account lifecycle, subscription terms, workspace settings or written agreement. | Access controls, encrypted transport and hosting/account operations providers where applicable. | Controller/processor allocation depends on the applicable agreement and workspace role. |
| Omnichannel message routing | Conversation content, message history, contact identifiers and channel metadata. | Route, draft, review and deliver messages through configured channels. | Workspace configuration, plan terms, customer instructions or written agreement. | Channel, hosting and infrastructure safeguards/providers where applicable. | Subprocessor and channel-provider details can be reviewed for the approved workspace scope. |
| AI-assisted drafting and context processing | Message context, AI inputs, generated drafts and workflow metadata. | Generate drafts, summaries or routing suggestions for enabled workflows. | Conversation, workflow and audit records, provider terms or applicable agreement. | AI infrastructure safeguards/providers where AI features are enabled for the workspace. | Customer business messages are not used to train Verbum-owned foundation models. |
| Approval workflows and audit history | Reviewer identity, decisions, timestamps, rules and audit events. | Record human review, automation decisions and traceable messaging history. | Plan configuration, workspace settings or written agreement. | Hosting, observability and security safeguards/providers where applicable. | Audit-history availability depends on enabled workflow events, plan capabilities and configuration. |
| Security, access, incident response and continuity | Security logs, session metadata, event records and backup service data. | Protect the service, monitor reliability, investigate incidents and maintain recoverability. | Operational and backup lifecycles defined by policy, infrastructure or agreement. | Security, monitoring, hosting, infrastructure and backup safeguards/providers where applicable. | Deletion and return requests are reviewed against legal obligations, security needs and backup lifecycle controls. |
| Business, billing and review support | Billing metadata, support messages, privacy requests and review communications. | Administer billing, support, privacy assistance and vendor review. | Request lifecycle and accounting, tax, contract, security, operational or legal obligations. | Payment, support, communication and document-review safeguards/providers where applicable. | Privacy rights assistance and procurement requests are handled through the legal/privacy review path. |
7. Medidas de segurança
O Verbum implementa medidas técnicas e organizacionais para proteger os Dados do Cliente, incluindo controles de acesso baseados em funções, criptografia em trânsito via TLS, monitoramento contínuo, registro de auditoria rastreável e práticas de desenvolvimento seguro.
Essas medidas são projetadas para oferecer um nível apropriado de segurança conforme a natureza e sensibilidade dos Dados do Cliente. O Verbum não reivindica certificações de segurança de terceiros a menos que sejam verificadas de forma independente e documentadas publicamente.
- Os Dados do Cliente são retidos enquanto a conta do cliente estiver ativa e pelo período adicional necessário para cumprir obrigações legais, regulatórias ou contratuais.
- Solicitações de exclusão antecipada podem ser enviadas pelo caminho de privacidade no formulário de contato.
10. Transferências internacionais
Os Dados do Cliente podem ser processados em países fora da jurisdição do cliente, incluindo países que podem não oferecer o mesmo nível de proteção de dados.
Quando transferências envolverem jurisdições com restrições específicas, salvaguardas apropriadas podem ser tratadas no DPA aplicável, nos termos contratuais ou em revisão de segurança enterprise.
- Uma lista atual das categorias de subprocessadores está disponível na página de Subprocessadores.
- Quando aplicável, o Verbum auxiliará os clientes a responder a solicitações de indivíduos que exercem direitos dos titulares de dados, como acesso, retificação ou exclusão.
- Em caso de incidente de segurança que afete os Dados do Cliente, o Verbum notificará os clientes afetados conforme exigido pela lei aplicável e seus compromissos contratuais.
Review Process
DPA review questions can be routed through the legal/privacy contact path.
Because DPA review and supporting materials may include non-public terms or evidence, access may require qualified review, an applicable order form, NDA or the appropriate confidentiality process.
Useful review materials can include this overview, the Privacy Policy, Subprocessors page, Security Overview, Trust Center and the contact path linked below.
- DPA review workflow and data-processing terms
- Subprocessors information
- Security overview and control review materials
- Privacy documentation
PROCUREMENT AND LEGAL REVIEW
Vendor review package for DPA and security questions
This page is the public overview. Qualified customers can route DPA questions through legal review alongside Trust Center, Security Overview, Subprocessors and Privacy Policy context. Formal DPA terms remain subject to legal approval and applicable contracting scope.
Precisa de revisão de DPA?
Entre em contato para solicitar um Contrato de Processamento de Dados assinado.