Review GDPR data processing and deployment controls.
Request the applicable data processing agreement and review workload location, management connectivity, access policies and desktop transfer settings for your GDPR assessment.
Review the processing scope
For processing covered by the DPA, review Neverinstall’s responsibilities, your documented instructions and the services in scope. Check the agreement alongside the proposed deployment architecture.
Separate workload location from management connectivity
Neverinstall Private Cloud runs on your infrastructure, including offline sites, so workload processing stays within your environment. Include the default hosted Management Console for Neverinstall Virtual Desktops in your processing review, or run a local one for disconnected deployments.
Review the locations and access paths for supporting data, including backups, logs and support access. Your privacy and legal teams should assess the proposed processing and transfers.
Technical controls to review
- Access policies
Assign access through identity, roles and policies.
- Desktop data transfers
Configure clipboard, printing and file-transfer policies for desktop sessions.
- Activity records
Review session and administrative records under your retention policy.
Documents for your assessment
Where can we review the DPA?
The Data Processing Agreement is available from our legal resources. Ask our team to confirm the agreement and processing scope that apply to your service.
Does selecting a region complete our review?
No. The region sets where workloads run. The review also covers data flows, support access and the applicable contractual terms.