This addendum describes general data processing expectations when JIJ provides hosting, development, support, or portal services for clients.
Roles
Depending on the service, the client may act as the controller or owner of data placed into websites, hosting accounts, forms, databases, email, or custom systems, while JIJ processes data to provide the service.
Processing Activities
JIJ may process account records, website files, databases, form submissions, support tickets, invoices, domain records, and technical logs as needed for hosting, support, maintenance, security, billing, or development.
Security Measures
JIJ uses practical access controls, hosting account separation, credential discipline, SSL support, backup planning, and monitoring practices appropriate to the services provided.
Subprocessors
JIJ may rely on infrastructure, payment, registrar, email, analytics, and security providers to deliver services. These providers may process data according to their own agreements and policies.
Client Responsibilities
Clients are responsible for the lawfulness of the data they collect, publish, store, or process through JIJ services and for providing any required notices or consents to their own users.