Privacy And Compliance
xTrakt processes documents and extracted data that may contain personal, financial, or operationally sensitive information.
Guidance
| Area | Practice |
|---|---|
| Data minimization | Collect and log only what the workflow needs |
| Tenant isolation | Keep documents, templates, and results scoped to the tenant |
| Secrets | Store credentials in GCP Secret Manager or approved local secret stores |
| Support | Share only support-safe identifiers unless a secure process requires more |
| Retention | Publish retention periods only after policy confirmation |
LGPD And GDPR Notes
Document processing workflows should be reviewed for lawful basis, retention, access control, and user data handling requirements. The product documentation should not promise compliance details that have not been confirmed by legal, security, or operations owners.