1. What data is transmitted to the Private Cloud?

When you check content using one of the Acrolinx Integrations, the content is sent to the server over an encrypted connection. It’s then processed by our linguistic engine to produce a report. We don’t permanently store the full content. After checking, the full content is discarded.

2. What transmitted data is generated and stored on the Private Cloud?

Small extracts of your content are stored so that Acrolinx can provide feedback on these extracts. These extracts come from parts of the document where we find an issue during a check. We need this information to tell you where to look for a problem and how it could be corrected.

If you create a terminology database, the term entries are also stored on the server. We also log information on who accesses the server, and when, so that we can maintain and debug the service.

For each user, the server stores the following data that relates to the user:

• Username
• Hashed and salted password (if not using Enterprise Federated Authentication)
• Reporting data and Scorecards from checks initiated by the users:
• Scores
• Metrics and data on checked content
• Small extracts from the content (see above)
• Custom user information as configured

3. Where is the information stored?

The content extracts are stored in the Scorecards and in a reporting database. The terminology is stored in a terminology database. Logs, stored on the file system don’t include IP addresses by default. All data remains in the Private Cloud installation. Please contact Acrolinx Support if you want all or parts of the data deleted.

4. How can I export my data?

If you want to export your data, please contact Acrolinx Support. You'll receive a copy of the following:

• Terminology database
• Reporting database, and
• Scorecards and reports

5. Who can access my data?

Acrolinx doesn’t have access to the infrastructure that is used to run your Private Cloud instance. Management is performed by our partner Rackspace, who is SOC and ISO 27001 certified. We liaise with Rackspace to update or change the services.

Rackspace hosts your Private Cloud instance on Amazon Web Services (AWS). Amazon Web Services adhere to specific security processes that are documented here and are also both SOC and ISO 27001 certified.

We usually have administration access to your Acrolinx Dashboard. We use this access to help you set up and configure the service. If you don’t want us to have an administration account for your Acrolinx Dashboard, please let us know.

6. How long is my data stored?

When your contract ends, we delete all your data within 60 days. On request, we delete all your data within one working day.

7. Acrolinx Privacy Policy

Read the Acrolinx Privacy Policy to find out more about your rights as a GDPR data subject and to find out how we process your data.

If you have any questions, including regarding the privacy and confidentiality of your data, please write to support@acrolinx.com. To exercise data subject rights, please contact gdpr@acrolinx.com.