Back to Repute

Repute legal

Data Processing

A product-level data-processing policy for visitor records, customer instructions, subprocessors, and data responsibilities.

Last updated: June 2026

This policy is product-level information for Repute. It is not legal advice and should be reviewed by qualified counsel before it is relied on for a contract, dispute, court filing, regulatory response, or customer-specific compliance position.

Roles

For visitor-management records, the customer organization generally decides why visitor data is collected, what buildings and users are configured, and how records are used. Repute generally processes that data to provide, secure, support, and improve the service. The exact legal role may depend on the customer agreement and applicable law.

Customer instructions

We process customer visitor records according to the service configuration, customer instructions, product documentation, support requests, legal obligations, security requirements, and the customer agreement. We do not sell visitor records.

Categories of data

Visitor records may include visitor name, document type, document number, optional mobile number, country code, destination building, destination unit, visit purpose, delivery company, notes, timestamps, staff member, organization, and optional document images if enabled or captured through the mobile app.

Sensitive documents

Document images and identification numbers can be sensitive. Repute stores document images privately, uses signed temporary access URLs, and limits access to authorized users. Customers should collect only what they need and should configure operational procedures accordingly.

Subprocessors and infrastructure

Repute may use reputable cloud, database, storage, email, monitoring, analytics, and hosting providers to operate the service. These providers may process data only as needed to provide infrastructure, security, support, delivery, observability, and related service functions.

International transfers

Cloud infrastructure and subprocessors may process or store data in locations outside the customer's building, city, or country unless a specific written data-residency arrangement applies. Customers should confirm any special residency requirement before onboarding.

Assistance

Where reasonably possible and required by applicable law or agreement, Repute may assist customers with access, correction, deletion, export, incident investigation, and privacy-rights requests relating to visitor records.