Legal and compliance
Your data, your rules. Here’s the fine print.
Everything your legal, procurement and security teams need to review Dockli, in one place.
GDPR and POPIA
Built for GDPR and POPIA.
We take data protection seriously, in the EU and in South Africa. There’s no official “GDPR” or “POPIA” badge to buy, so instead here’s exactly what we do.
- Data Processing AddendumOur processor terms under GDPR Article 28 and operator terms under POPIA, with our security measures. Read the DPA
- Hosted in the EUDockli’s services and data, Dockli AI, dictation and email all run in Microsoft’s European data centres. See every sub-processor
- Your content stays yoursFiles stay in your Microsoft 365, Dockli works with your own permissions, and nothing is used to train AI.
- Your rights, made easyAsk to access, correct or delete your data at any time, and we’ll help your organisation answer requests. Privacy Policy
- Breach notice within 48 hoursIf something goes wrong with your data, we tell you quickly, so you can meet your own duties.
At a glance
How Dockli treats your data.
Hosted in the EU
Dockli’s services, data, Dockli AI and dictation run in Microsoft Azure, Sweden Central.
Your files stay in Microsoft 365
Dockli works with your own permissions and doesn’t copy your files to our servers.
No training on your content
Prompts, documents and answers aren’t used to train AI models.
Microsoft publisher-verified
Dockli’s Microsoft Entra apps are published by a verified publisher, Tiny Tugboat.
Questions, a signed DPA or a security questionnaire?
Email support@dockli.io. We’ll countersign the DPA, answer your questionnaire, or walk your security team through Dockli. To report a security issue, email the same address with “Security” in the subject; we’ll reply within two business days.