NostokBack to the site

For customers

Data processing

If Nostocia ever comes to process your company's personal data, the processing is defined before the service is activated. It is not left to a generic promise on the web.

Last updated: July 24, 2026

The split of responsibilities

As a general rule, your company decides for what purpose and how it uses the data of its activity and acts as the controller. Skydesk International ESPJ acts as the processor with respect to the data it processes on behalf of your company and following your documented instructions.

This document is informative. The applicable processing agreement will be incorporated into the service contract before integrations or access to personal data are enabled.

What the processor agreement will set out

  • Subject matter, duration, purpose and categories of data and data subjects.
  • Your company's documented instructions and the limits on the use of Nostocia.
  • Security measures, access management and incident notification.
  • Technology sub-processors, relevant changes and applicable guarantees.
  • Assistance with data subject rights and compliance obligations.
  • Return or deletion of data at the end of the service, with the applicable legal exceptions.

Operating principles

Nostocia is configured to work with the context each company authorizes. Actions that could have an external impact must be subject to the agreed level of approval. One customer's data will not be used to train or operate another customer's environment.

Before connecting data sources

We will review the scope of each integration, the permissions required and the information the use case really needs. If the processing requires additional conditions (for example, because of the nature of the data or an international transfer), they will be documented before it is activated.