Data protection at Avos
We follow the GDPR, the LGPD and the privacy laws of every country where your company hires. Here is how we protect your employees' data.
Technical and organizational measures
End-to-end encryption
All data in transit is protected by TLS 1.3. Data at rest is encrypted with AES-256, including sensitive employee data.
Access control (RBAC)
Granular role and permission system. Each user only accesses the data necessary for their role in the company.
Data minimization for AI
Before any text reaches an AI provider, document numbers, emails and phone numbers are stripped out.
Audit logs
All critical actions are recorded in immutable audit logs, enabling complete traceability.
Impact report (DPIA)
We maintain an updated Data Protection Impact Assessment for all sensitive data processing.
Secure backups
Automatic daily backups with 90-day retention, encrypted and stored in a geographically separate location.
Your rights as a data subject
Confirmation
Know if your data is processed
Access
Obtain a copy of your data
Correction
Correct incomplete or incorrect data
Anonymization
Request anonymization of unnecessary data
Portability
Receive your data in structured format
Deletion
Request deletion of data processed by consent
Opposition
Object to processing in specific cases
Revocation
Revoke consent at any time
To exercise your rights, contact our DPO: privacy@useavos.app
Shared responsibilities
Avos as Processor
When we process employee data on behalf of your company, we act as a Data Processor. We follow the Controller's instructions and do not use data for any purpose beyond providing the Service.
Your company as Controller
Your company is the Controller of your employees' data. You are responsible for obtaining necessary consents, keeping data accurate and responding to data subject requests.
Questions about data protection?
Our team is ready to help your company achieve compliance.