Data processing addendum

Roles

You are the controller of the personal data in your applications and in your team's account. Railyard is a processor for the data the control plane holds on your behalf: account data of your team members, environment variables, deploy and runtime logs, metrics and audit entries. Your applications' databases and files stay on your servers and are not processed by Railyard.

Instructions

Railyard processes that data only to run the service as documented and as you configure it in the dashboard, the CLI and the API, and never for its own purposes.

Security

• Environment variables and secret files are encrypted at rest; the control-plane database is encrypted; backups are encrypted in your team's bucket.
• Access to the control plane is by role, with two-factor sign-in available to everyone and required for operators.
• Agents on your servers authenticate with a token per server; a compromised server cannot speak for another.
• Every action in a team is written to its audit log, exportable as CSV.

Subprocessors

Listed on the subprocessors page; changes are announced 30 days ahead and you may object.

Assistance and deletion

Team owners can export and delete their team's data themselves; members can export and delete their own account. Railyard assists with requests from data subjects within 30 days. When a team is deleted, its data is deleted from the control plane; backups in your own bucket are yours to keep or delete.

Incidents

A personal-data breach affecting your data is reported to the team owners without undue delay, with what is known at the time and the steps taken.

Transfers

The control plane is in the United States (AWS, us-east-1). For customers outside the US this is a transfer outside their jurisdiction; the safeguards are the measures above and the standard contractual clauses on request.