Alpha Data Processing Acknowledgement

What you are acknowledging

TELSTEAD is an alpha service for a deliberately limited Plastim QMS evaluation. Your organisation confirms its authority to provide the agreed business QMS content. This acknowledgement records understanding of the arrangements; it is not a claim that consent alone resolves international-transfer requirements.

Providers and processing locations

TELSTEAD uses Microsoft Azure for hosting and Microsoft Foundry for the selected GPT-6 Astra semantic service. The planned TELSTEAD database and private original-file storage are in UK South. The selected model resource is in UK South, but GlobalStandard semantic processing may occur in the United States. Do not assume all QMS data remains in the UK.

For this bounded alpha the operator assumes that OpenAI-related processing, where applicable to the Microsoft service chain, may occur in the United States. That is an operator-accepted assumption, not a verified Astra-specific processor mapping. Microsoft may use subprocessors under its contractual framework; inclusion in its general list does not mean every listed supplier processes your documents. Wider production contractual/transfer and professional review conditions remain open.

Relevant excerpts and manual screening

A human administrator must screen content as Semantic processing allowed, Local processing only or Excluded. Relevant bounded excerpts, revision context and necessary document identifiers may be sent for an explicitly enabled semantic analysis. TELSTEAD does not intentionally send the entire QMS repository. Reduce personal names and unnecessary identifiers before upload where that preserves the business meaning. This is manual screening, not an automatic data-loss-prevention claim.

Do not provide

Exclude completed employee records, health or special-category data, disciplinary or payroll records, CVs, personal training records, private contact details, credentials, payment or bank information, government identifiers, customer personal-data lists, unnecessary supplier personal data, legally privileged material, export-controlled information without separate approval, and third-party material you lack authority to provide.

Human review and confidentiality

Semantic findings are advisory; review the evidence. TELSTEAD does not certify compliance or automatically alter your controlled QMS. Access to QMS information is restricted to authorised members and service operations. Operational logs and alerts must not contain proprietary document excerpts. Private analysis snapshots may retain the bounded evidence needed for review.

Retention, deletion and suspension

Original files, extracted content, analysis snapshots and review records are retained for the agreed alpha and removed from active storage within the proposed 30-day end-of-alpha/deletion period, subject to identified legal requirements. Minimal account, terms-acceptance and security evidence has a proposed 12-month post-alpha retention for accountability. Backups use a separately verified finite retention; no promise of immediate deletion from all backups is made. These schedules require operator approval before real intake.

Contact hello@elliotcardwell.uk to suspend processing, request correction, export/return, deletion or withdraw from the alpha. Provider access must be stopped on suspension. Actual upload and provider enablement remain separate controlled gates, including the approved document scope, security checks and spend budget.