OpenWaya legal
Data Processing Information
Practical information for organizations assessing OpenWaya as a data processor or service provider.
Version 1.0 · Effective 2026-09-11
Roles and instructions
For customer data submitted through the API, the customer generally determines purpose and means while OpenWaya processes data to provide the contracted service and documented features. OpenWaya acts independently for account security, billing, fraud prevention, and its own legal obligations.
Customers must have a lawful basis and provide required notices for data they submit. OpenWaya processes that data only through documented product controls, customer configuration, and lawful instructions.
Security and assistance
OpenWaya applies tenant isolation, encryption, least-privilege access, audit evidence, incident handling, retention controls, provider governance, and tested recovery procedures appropriate to the service risk.
Enterprise customers can request a data processing agreement and security information through support@openwaya.africa. Regulatory-specific commitments apply only when recorded in an executed agreement.