Roles
The customer determines why and how it uses personal data in its workspace and is normally the controller. Keystone processes that Customer Data only to provide and secure the service. Our Privacy Policy explains our processing as controller.
Privacy
UK GDPR Information
Keystone acts as controller for its own account, billing, website and support data, and normally as processor for Customer Data in a workspace.
Last updated 7 August 2026
Individual rights
Workspace users should first contact their employer or the relevant workspace owner about Customer Data. For data we control, or to raise a concern, email site@keystoneai.uk. We will respond in accordance with applicable data-protection law.
DPA and subprocessors
The Data Processing Addendum forms part of the SaaS Agreement and identifies processing terms, subprocessors, international-transfer approach and deletion process.
Security
Our Security Pack records the implemented technical controls and the operational controls we are still formalising. It is deliberately specific about what is and is not currently committed.