DEMO PLATFORM — 47Funds is currently a prototype. It is not affiliated with, endorsed by, or officially connected to ANAF, ONRC, REGAS, MySMIS, MIPE, or any Romanian or EU governmental authority. All registry data shown is simulated for demonstration purposes only.
This DPA forms part of the Master Service Agreement between the Customer (Controller) and SC TESTGATE SRL (Processor). It reflects the requirements of GDPR Art. 28.
The Processor shall process Personal Data only on documented instructions from the Controller, including with regard to transfers of personal data to a third country or an international organization.
| Security Domain | Implementation |
|---|---|
| Access Control | MFA mandatory for all admin roles. RBAC enforced. |
| Encryption | AES-256 at rest, TLS 1.3 in transit. |
| Availability | 3-2-1 Backup strategy. Geo-redundant storage. |
Processor maintains a list of approved sub-processors. Controller hereby authorizes the use of the following sub-processors:
Azure (West Europe)
Hosting & Logic
Postmark
Transactional Email
sven.systems
AI Processing
Data is primarily stored and processed within the EEA. Any transfers outside the EEA are governed by Standard Contractual Clauses (SCCs) or the EU-U.S. Data Privacy Framework.
Download our pre-signed PDF DPA for your records.