Records of Processing Activities (ROPA) – Mobility Stream Platform
|
Activity |
Purpose |
Data Categories |
Recipients/Subprocessors |
Retention |
Lawful Basis |
Transfers |
|---|---|---|---|---|---|---|
|
Authentication Logging |
Security, access control |
IP address, email address |
AWS EC2, GuardDuty, CloudWatch |
30 days |
Contractual |
DPF/SCCs |
|
Support Ticket Handling |
Customer support |
Email, ticket metadata |
Jira, SupportPlatform |
Ticket closure/90 days |
Contractual |
SCCs/N/A |
|
Usage Analytics |
Service improvement (anonymized) |
Session ID, device/browser |
AnalyticsProvider |
Aggregated |
Legitimate interest |
SCCs/DPF |
|
Vulnerability Scanning |
Security, compliance |
System config, event logs |
AWS Inspector |
30 days |
Legal obligation |
DPF/SCCs |
|
Backup & DR |
Business continuity |
Configuration metadata |
AWS RDS, DynamoDB |
30 days |
Contractual |
DPF/SCCs |
|
Internal Communication |
Support, admin |
User email (internal only) |
Microsoft 365, Slack |
N/A |
Contractual |
SCCs/DPF |