Security and data protection
Security measures for your clients’ data
Read our privacy notice and Data Processing Agreement for Managed’s published commitments on access, security, suppliers, transfers, retention and deletion. Contact us for current hosting and subprocessor details.
Your signed agreement or security schedule sets the terms that apply to your organisation.
What our published documents cover
Read the source documents for the terms and controls that apply to Managed.
Privacy and personal data
See what information Managed may process, why it is used, who it may be shared with, retention and your rights.
Processor responsibilities
Review the roles, instructions, confidentiality, security measures, subprocessors, transfers, assistance and deletion commitments in the DPA.
Access and operational controls
Our Data Processing Agreement explains the security measures agreed for the service, including access restrictions, environment separation, encrypted transport and logging where applicable.
Contracts and service terms
Read the terms that apply to your service. A signed agreement may supplement or take precedence over the public summary.
Request details for your security review
Ask the Managed team for current hosting and supplier information relevant to your organisation and the services you plan to use.
Data hosting locations
Ask where your organisation’s data is hosted and whether any international transfers apply.
Current suppliers and subprocessors
Request the supplier information relevant to the services and integrations you plan to use.
Assurance for your organisation
Share your security questionnaire and ask which documents or control details are available.
Retention and deletion
Confirm how the contract and configured service handle retention, export and deletion for your account.
Have a security or data-protection question?
Contact the Managed team before importing sensitive records. Please do not include client or patient information in your enquiry.