Customer is the Controller and InsightJustice is the Processor under applicable Data Protection Laws.
InsightJustice implements encryption, tenant isolation, and incident notification within seventy-two hours.
Authorized Subprocessors are published at insightjustice.com/subprocessors.
Core subprocessors include Microsoft Azure, Stripe, Payload, and Zoho Mail.
Google Analytics, used solely on the InsightJustice public marketing site as described in the Cookie Policy, does not Process Customer Content and is not a Subprocessor for purposes of this DPA.
PHI processing is disabled until a signed BAA and firm PHI authorization are in place.
Request countersigned DPA or BAA review at privacy@insightjustice.com or security@insightjustice.com.