Records of processing
GDPR Art. 30(2) requires the processor to keep a record of the categories of processing it carries out on behalf of each controller. This page is that record for the Cowliss prototype, stated once and applicable per tenant organization.
Processor: Capital Enesti Inc., registered in Canada at 1185 rue De Bougainville, Saint-Bruno-de-Montarville (Québec) J3V 3E8. NEQ 1181686743. Contact and data protection officer: [email protected].
Controller: each organization holding a Cowliss workspace — recorded per tenant as [organization name and contact].
Categories of processing, per tenant
Section titled “Categories of processing, per tenant”| Category of processing | Personal data | Where it lives |
|---|---|---|
| Profile and trait storage | User identifiers, traits, email addresses | Postgres |
| Event stream storage | Event names, properties, timestamps, anonymous and identified IDs | ClickHouse |
| Identity resolution | anonymousId ↔ userId links |
Postgres (alias map) |
| Consent state | Per-purpose consent flags (emailMarketing, dataProcessing) and revocation events |
Postgres and ClickHouse |
| Segmentation | Predicate evaluation over traits and event history | Computed on write; membership in Postgres |
| Journey execution | Per-user workflow state, timers, step history | Temporal |
| Email delivery | Recipient address, rendered message, delivery/bounce/complaint status | AWS SES; delivery log in Postgres |
| Webhook delivery | Event payloads to the controller’s destinations | Delivery log in Postgres |
| Suppression mirroring | Suppressed addresses and reasons | Postgres (mirror of the SES account suppression list) |
| Usage metering | Aggregate counts (events, emails, webhooks, journey runs) and wallet balance | Postgres and ClickHouse |
| Team accounts | The controller’s team members: names, emails, roles | Clerk |
Transfers, retention, security
Section titled “Transfers, retention, security”- Transfers: to Capital Enesti Inc. in Canada under the EU adequacy decision for Canada (commercial organizations subject to PIPEDA). Subprocessor hosting locations are on the subprocessor list.
- Retention: the controller configures event retention per organization (applied as a ClickHouse TTL); profiles and state persist until erasure or termination.
- Security: the technical and organizational measures in the DPA’s Annex B (Data processing agreement).