Legal 05 / 08

Data processing.

For the data your workspaces and portals hold, you are the controller and we are the processor: we act on your instructions, and only on them.

Effective 5 September 2026 Plain English

The arrangement

Data your workspaces and client portals hold — client records, files, messages, form submissions — is yours. We store and serve it on your instructions, protect it with the same measures that protect the platform, delete it when you delete it, and share it only with the subprocessors that host the service. We handle it in line with GDPR and similar law where it applies.

A signed DPA

If your organisation needs a countersigned data processing agreement, write to support@stacklumen.com.

These pages are written to be read, and they are the terms we operate by — but they are maintained by the team, not issued as legal advice. If something here matters to a decision you are making, ask your own counsel, and if anything looks wrong or unclear, tell us at support@stacklumen.com.