GDPR Compliance & DPA

01. UK GDPR Commitment

Dutio is built from the ground up to support UK Security Industry Authority (SIA) regulated agencies in meeting their compliance obligations under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

02. Data Subject Rights

As a Data Processor, Dutio provides the technical tools necessary for our Data Controllers (Security Agencies) to fulfill Data Subject Access Requests (DSARs), including:

• ▪ Right of Access & Portability: Agencies can export all telemetry, shift, and incident data via standard CSV/JSON formats.
• ▪ Right to Erasure: Guard profiles and associated telemetry can be permanently deleted from our live databases upon request, propagating through our multi-tenant Firestore architecture.

03. Data Processing Agreement (DPA)

We provide a comprehensive standard DPA to all enterprise and professional tier clients prior to deployment. This DPA legally binds Dutio to strict security, confidentiality, and breach-notification standards. For a signed copy of the DPA to append to your agency's records, please contact our compliance team directly.