Role
Amanect acts as a data controller for personal data processed to deliver its verification and platform services. Where Amanect processes personal data on behalf of a business customer (for example, employee contacts on a Strategic Member engagement), Amanect may act as a processor under a written DPA.
Sub-processors
Amanect relies on the following categories of sub-processors:
- Cloud hosting and database (EU region).
- Email delivery and support ticketing.
- Authentication and identity management.
- Payment processing (PCI-DSS certified provider).
- Sanctions and adverse-media screening providers.
- Product analytics (privacy-respecting).
A current list with legal entity names and locations is available on request from trade@amanect.com.
International transfers
Where sub-processors are located outside the EEA, Amanect relies on European Commission adequacy decisions where available, and otherwise on Standard Contractual Clauses (2021/914) with additional safeguards where required.
Data Processing Agreement (DPA)
Business customers may request Amanect’s standard DPA by writing to trade@amanect.com. Where GDPR applies, the DPA reflects Art. 28 requirements.
Security
Encryption in transit, role-based access controls, least-privilege administration, audit logging, incident-response procedures and staff confidentiality obligations.
Breach notification
Amanect will notify affected customers of a personal data breach in accordance with applicable law and contractual obligations.
Contact
Data protection queries: trade@amanect.com. Where applicable, you may contact the data protection authority with jurisdiction over your location.
This page is maintained by Amanect (operated by Amanect India Private Limited, India) to help visitors understand our operating practices. It is provided for general information only and does not constitute legal advice. Users should seek independent legal counsel for their own circumstances. Contact: trade@amanect.com.