Legal
Data Processing Addendum
Last updated January 2026
Nuvanta Cloud is in private beta. This document is a plain-language summary of our intended terms and is not yet a final legal agreement. Final terms will be published before paid plans launch.
Roles
For business plans, your organisation is the data controller and Nuvanta Cloud is the data processor. We process backup content only to provide the backup and restore service you have asked for.
Security measures
Encryption in transit and at rest, encryption of file content on the client before upload, role-based access control for support staff, audit logging of administrative actions, and least-privilege access to production systems.
Sub-processors
We maintain a current list of infrastructure sub-processors and the regions they operate in, available on request. We will give notice before adding a sub-processor that stores backup content.
Breach notification
If we become aware of a personal data breach affecting your data, we will notify your nominated contact without undue delay, with what we know, what we are doing, and what you may need to do.
Deletion and return
On termination, you may export or restore your data during the 30-day grace period, after which backup content is deleted from primary and redundant storage.
Questions about this document? Email support@nuvanta.in.