Records of Processing Activities (ROPA) – MobilityStream Platform
Records of Processing Activities (ROPA) – Mobility Stream Platform
Activity | Purpose | Data Categories | Recipients/Subprocessors | Retention | Lawful Basis | Transfers |
|---|---|---|---|---|---|---|
Authentication Logging | Security, access control | IP address, email address | AWS EC2, GuardDuty, CloudWatch | 30 days | Contractual | DPF/SCCs |
Support Ticket Handling | Customer support | Email, ticket metadata | Jira, SupportPlatform | Ticket closure/90 days | Contractual | SCCs/N/A |
Usage Analytics | Service improvement (anonymized) | Session ID, device/browser | AnalyticsProvider | Aggregated | Legitimate interest | SCCs/DPF |
Vulnerability Scanning | Security, compliance | System config, event logs | AWS Inspector | 30 days | Legal obligation | DPF/SCCs |
Backup & DR | Business continuity | Configuration metadata | AWS RDS, DynamoDB | 30 days | Contractual | DPF/SCCs |
Internal Communication | Support, admin | User email (internal only) | Microsoft 365, Slack | N/A | Contractual | SCCs/DPF |