1. Roles
The customer is the data controller for employee, visitor, and facility data processed through Axix software. Axix Technologies acts as a data processor (or sub-processor where applicable) when providing support, license validation, or optional cloud services agreed in writing.
2. Scope of processing
The DPA covers processing necessary to deliver subscribed software, including:
- Video analytics metadata and identity-verification templates (Axix Visual Intelligence)
- Visitor pre-registration, check-in events, and host notifications (Axix Visitor)
- Workforce attendance and HR records uploaded by the customer (Axix HCM)
Customers must establish a lawful basis (including workforce/visitor consent or legitimate interest where permitted) before enabling biometric or identity-verification features.
3. On-premise deployment
For standard on-premise deployments, video streams, biometric templates, and visitor records remain on customer-controlled infrastructure. Axix does not charge per-GB cloud storage fees for processing that stays entirely on the customer network.
4. Security & subprocessors
Axix implements administrative, technical, and organizational measures appropriate to the risk. Subprocessors (hosting, email delivery, payment partners) are used only where required for the subscribed service and are bound by confidentiality and data-protection obligations.
5. Data subject rights
Customers are responsible for responding to data-subject requests. Axix will assist with reasonable requests to export, correct, or delete data processed on the customer's behalf, subject to the subscription agreement.
6. Related policies
See also our Privacy Policy, Terms of Service, and Merchant Disclosure.