Data Processing Terms Overview

Effective: 12 May 2026Updated: 12 May 2026

Purpose

This overview describes key data-processing principles for organizations using Sheriff Flow. Where needed, Sheriff Flow may execute a separate contractual data-processing addendum.

Roles

  • Organizational customers generally act as controllers for data they submit to the platform.
  • Sheriff Flow generally acts as an operator/processor for data processed to provide platform services.

Processing Scope

Data is processed to provide sheriff matching, service-area mapping, workflow coordination, account security, customer support, and operational analytics.

Security and Confidentiality

Sheriff Flow applies technical and organizational security measures, limits access by role, and requires confidentiality obligations for personnel and relevant providers.

Subprocessors

Sheriff Flow may use subprocessors for hosting, monitoring, communications, payments, and related support operations. Subprocessors are engaged under contractual controls and legal compliance obligations.

Cross-Border Processing

Where cross-border processing is required, Sheriff Flow applies appropriate safeguards in line with applicable law and contractual obligations.

Incident Handling

Sheriff Flow maintains incident-response procedures and will notify affected customers of qualifying security incidents in line with applicable law and contractual commitments.

Data Rights and Assistance

Sheriff Flow provides reasonable assistance to support lawful data subject rights requests and compliance activities, subject to verification, scope, and legal constraints.