Data Processing
Effective September 5, 2026
Scope
This page describes how XCNTRY processes personal data on a design partner's behalf once a pilot or production Agent City deployment is live. It supplements — and does not replace — the data processing terms in that partner's signed agreement.
Roles
For data ingested by a partner's Agent City deployment — task inputs, agent telemetry, evidence and outcome records — the partner is ordinarily the controller and XCNTRY the processor, acting only on the partner's documented instructions.
How access is constrained
Every action inside Agent City runs through the platform's own Identity, Authority, Policy & Tool Gateway, and every consequential action is written to append-only Evidence, Outcome, Value & Risk Ledgers. Access to a partner's data is scoped by that same policy layer, not left to informal convention.
Subprocessors
We use a small set of infrastructure and hosting subprocessors to run the platform. A current list is available on request.
Data subject requests
If a partner receives an access, correction, or deletion request from one of its own data subjects, we'll assist in fulfilling it within the timeframe the agreement specifies.
International transfers
Where personal data crosses borders, we use appropriate safeguards consistent with applicable law.
Term and deletion
On termination of an engagement, partner data is deleted or returned per the terms of that agreement.
Contact
Data processing questions: info@projera.com.
