GDPR Compliance

Zextras is a useful tool when it comes to being compliant with the rules introduced by GDPR, especially for what concerned data localization, security access, rights to erasure and data portability.

DATA LOCALIZATION

Support to Object Storage enables administrators to take advantage of Cloud Services that support geographic management for storage data.

In this way Admins can scale out without losing control of the mail flow and being sure of where the data are stored.

PREVENTION OF INCIDENTS THANKS TO BACKUP AND DISASTER RECOVERY

Avoiding incidents sometimes is not possible at all and data’s backup is crucial in order to guarantee activity continuity in case of damages, corruptions, human mistakes, power surge etc.

Moreover, natural disasters such us fires, floods, earthquakes or collapses can permanently damage the whole infrastructure and they are events that an appropriate backup and disaster recovery plan should consider.

The transactional Zextras Backup helps to fulfill these needs thanks to the real-time engine that store data in a safe and consistent way.

That permits to set up incremental copying towards remote site without interfering with production environments nor requiring architecture’s structural modifications.

RIGHT TO DATA PORTABILITY

GDPR defines the users’ right to export anytime their data in an open format based on public standards. By using Zextras, export a whole domain is easy as export a single account.

Zextras by design supports open standard and exported data are organized in a structured way, using open and compatible formats.

RIGHT TO ERASURE

Backup activities guarantee the system but at the same time, they face an issue concerning personal data management, especially when a user wants to exercise his right to erasure.

In fact, “Data erasure” must take place both into production system and into backup’s copies.

The coherency tools included into Zextras allow the administrator to erase an account and, later, delete all the contents associated with the account too.

STORAGE LIMITATION

One of the rights defined by GDPR refers to data’s hold time. This means that administrators must assure that all the data are not stored for more than the required time.

This right applies also to backup management and purge. Zextras retention management guarantees to the Administrator that data will be deleted from the backup after the period established in accordance with the user.