# Privacy and security documentation

### Executive Summary <a href="#executive-summary" id="executive-summary"></a>

Eli is a SaaS platform that helps organizations create and deploy internal awareness and engagement campaigns around strategic topics including well-being, corporate sustainability, cybersecurity practices, and other critical business initiatives. This documentation provides complete technical, security, and compliance information about our platform.Our platform operates globally across multiple jurisdictions including Europe (EU/EEA), UK, US, Canada, China, Australia, and the Middle East, with full compliance to regional privacy laws and security standards.

### What You'll Find Here <a href="#what-youll-find-here" id="what-youll-find-here"></a>

This documentation covers everything you need to know about Eli's security, privacy and technical infrastructure:

**Service Overview**

* ​[**What We Do**](service-overview/what-we-do) - Core platform capabilities, strategic focus areas, and typical deployment scenarios
* ​[**How It's Built**](service-overview/how-its-built) - Complete technology stack, architecture diagrams, CI/CD processes, and infrastructure specifications
* ​[**Where We Operate**](service-overview/where-we-operate) - Global service delivery, regional requirements, and network considerations
* ​[**Who We Work With**](service-overview/who-we-work-with) - Complete sub-processor registry with security controls and criticality assessments

**Data Privacy**

* ​[**Privacy Laws Compliance**](data-privacy/privacy-laws-compliance) - Legal bases strategy, data subject rights procedures, and global regulatory framework
* ​[**What Data We Handle**](data-privacy/what-data-we-handle) - GDPR-compliant data processing register with legal bases and retention schedules
* ​[**Data Processing Agreement**](data-privacy/data-processing-agreement) - Enterprise DPA template and execution procedures

**Security Operations**

* ​[**Security Framework**](security-operations/security-framework) - Defense-in-depth strategy leveraging enterprise cloud providers
* ​[**Access Controls**](security-operations/access-controls) - Internal access management and production environment security
* ​[**Data Protection & Backup**](security-operations/data-protection-and-backups) - Automated backup strategies and business continuity procedures
* ​[**Incident Response & Recovery**](security-operations/incident-response-and-recovery) - Provider-leveraged incident response and customer communication procedures

**Support**

* ​[**Contacts & Help**](contacts-and-help) - Contacts and links to status dashboards

### Quick Navigation Guide <a href="#quick-navigation-guide" id="quick-navigation-guide"></a>

**For IT Security Teams:** Start with [Security Operations](security-operations) and [Incident Response & Recovery](security-operations/incident-response-and-recovery)​

**For Privacy Officers:** Begin with [Data Privacy](data-privacy) and [Privacy Laws Compliance](data-privacy/privacy-laws-compliance)​

**For Compliance Teams:** Review [Data Processing Agreement](data-privacy/data-processing-agreement) and [Privacy Laws Compliance](data-privacy/privacy-laws-compliance)​

**For Architecture Reviews:** Check [How It's Built](service-overview/how-its-built) and [Where We Operate](service-overview/where-we-operate)​

***

**Last Updated:** August 2025
