Data Processing Agreement (DPA)
ALTCHA is available in two deployment models — self-hosted ALTCHA Sentinel and ALTCHA Cloud — and the data processing relationship differs between them. This page explains which documentation applies to your deployment and provides both as downloadable PDFs.
Self-hosted (ALTCHA Sentinel)
When you self-host ALTCHA Sentinel, it runs entirely on your own infrastructure. No personal data is transferred to BAU Software s.r.o.'s servers or any other service.
Because no data is processed on your behalf, ALTCHA does not act as a Data Processor under GDPR — you remain the sole Data Controller for any data handled by your deployment.
For internal compliance documentation, we provide a signed No-Processing DPA Statement, confirming that:
- The product is fully self-hosted by you.
- No personal data is transferred to ALTCHA.
- No processing relationship is created between you and ALTCHA.
ALTCHA Cloud
When you use ALTCHA Cloud, data processing occurs on ALTCHA's infrastructure, hosted entirely within the EU. In this model, you remain the Data Controller and ALTCHA acts as your Data Processor, with no further subprocessors.
A standard Data Processing Agreement is available for review and signing, covering the terms of this processing relationship, security measures, and your rights as Data Controller.
Download: DPA for ALTCHA CloudManaged deployments and support access
Managed deployments, or temporary support access to a self-hosted instance, may involve ALTCHA staff accessing your environment or data. These situations fall outside the standard documents above and require a separate agreement defining the scope of access and applicable security controls — contact us to arrange one.