Privacy goals and operator responsibilities

Privacy & Data Control

Subkit is being designed to support portable deployment and data minimization. It is pre-alpha software, not a compliance certification or legal service.

What self-hosting can change

A self-hosted deployment can give an operator more control over infrastructure, data location, retention, access, and subprocessors. It can reduce reliance on a managed subscription platform, but it does not automatically establish GDPR compliance or remove every third party from an application's data flow.

Operator responsibilities

Operators remain responsible for determining controller and processor roles, lawful bases, security measures, retention periods, data-subject rights, incident handling, and required contracts. App stores, hosting providers, email services, analytics tools, and other integrations may still process personal data independently.

Managed Cloud status

Subkit Cloud is planned and is not currently offered as a production subscription-processing service. Hosting regions, subprocessors, retention rules, security commitments, and contractual documents will be published before customer data is accepted.

No legal guarantee

This page describes product direction for general information and is not legal advice. Organizations should assess their own deployment and obligations with qualified privacy or legal counsel.

privacy@subkit.eu