{"id":1336,"date":"2025-09-13T11:15:07","date_gmt":"2025-09-13T15:15:07","guid":{"rendered":"https:\/\/www.softwareag.com\/?page_id=1336"},"modified":"2026-08-24T15:59:36","modified_gmt":"2026-08-24T19:59:36","slug":"data-privacy","status":"publish","type":"page","link":"https:\/\/www.softwareag.com\/en\/company\/trust-portal\/data-privacy\/","title":{"rendered":"Data Privacy"},"content":{"rendered":"\n
\n

TOMs<\/strong><\/h2>\n\n\n\n

The technical and organizational measures (TOMs) provided below apply to the product portfolio offerings of Software AG<\/span>:<\/p>\n\n\n\n \n

\n
\n \n
\n \n \n <\/g><\/g><\/g><\/svg>\n <\/span>\n <\/div>\n

General Technical and Organizational Security Measures \u2013 Maintenance and Support Services<\/h3>\n <\/div>\n\n
\n
\n

Review the technical and organizational safeguards Software AG applies to protect personal data during maintenance and support, including access, encryption, resilience, and compliance controls.<\/p>\n\n <\/div>\n \n \n \n <\/a>\n <\/div>\n <\/article>\n \n

\n \n \n <\/svg>\n <\/span>\n <\/div>\n

General Technical and Organizational Security Measures \u2013 Professional Services<\/h3>\n <\/div>\n\n
\n
\n

Review the technical and organizational safeguards Software AG applies to protect personal data during professional services, including access, encryption, resilience, and compliance controls.<\/p>\n\n <\/div>\n \n \n \n <\/a>\n <\/div>\n <\/article>\n <\/div>\n <\/div>\n <\/section>\n\n\n\n

\n\n\n\n \n
\n
\n \n
\n \n \n <\/svg>\n <\/span>\n <\/div>\n

List of Subprocessors<\/h3>\n <\/div>\n\n
\n
\n

View the organizations that may process personal data for A&N customer services, including their countries, addresses, transfer safeguards, and processing activities.<\/p>\n\n <\/div>\n \n \n \n <\/a>\n <\/div>\n <\/article>\n <\/div>\n <\/div>\n <\/section>\n\n\n\n

The list of subprocessors provided below applies to the processing of personal data in relation to the product portfolio offerings of Software AG<\/span>:<\/p>\n<\/div>\n\n\n\n\n\n

\n
\n\n\n\n

Data Privacy FAQ<\/h3>\n\n\n\n

Data protection and data privacy are becoming increasingly important in our connected world. At Software GmbH, customers can trust that their personal data is processed in compliance with data protection\/data privacy requirements.<\/p>\n\n\n\n

See our FAQ for how we process our customers\u2019 personal data and how we ensure customers can use our products and services in compliance with applicable requirements.
<\/p>\n\n\n\n

What measures have been implemented to achieve data protection-compliant products and services? <\/h4>\n\n\n\n

All products offered by Software GmbH have been analyzed with respect to their functionality for processing personal data in accordance with the applicable data protection principles. For future functionality, a release task to verify data protection compliance has been integrated into the product release cycle.<\/p>\n\n\n\n

How are accountability and governance requirements addressed?<\/h4>\n\n\n\n

Software GmbH has set up a Data Protection Management System (DPMS), which defines clear processes for relevant data protection aspects, including the following processes and risk assessments:<\/p>\n\n\n\n

    \n
  1. Handle Data Subject Requests<\/li>\n\n\n\n
  2. Handle Data Breach<\/li>\n\n\n\n
  3. Review DPA (Data Processing Agreement)<\/li>\n\n\n\n
  4. Data Privacy Impact Assessment Necessity Check<\/li>\n\n\n\n
  5. Data Privacy Impact Assessment (DPIA)<\/li>\n\n\n\n
  6. Data Breach and Risk Assessment<\/li>\n\n\n\n
  7. Transfer Impact Assessment (TIA)<\/li>\n<\/ol>\n\n\n\n

    As part of the scope of Software GmbH\u2019s ISO 9001 certification, the established DPMS processes are subject to regular external audits.<\/p>\n\n\n\n

    Additionally, Software GmbH has implemented a Global Data Protection Policy, which applies to all employees. The objective of this policy is to regulate the legally compliant handling of personal data within Software GmbH and its subsidiaries, and to protect the rights arising from data protection\/privacy regulations of all persons whose data is processed by Software GmbH.<\/p>\n\n\n\n

    How is Software GmbH processing personal data on behalf of customers?<\/h4>\n\n\n\n

    When Software GmbH processes personal data on behalf of its customers (data controllers), or when access to personal data cannot be ruled out in the course of service provision, a Data Processing Agreement (DPA) is concluded as standard practice. It addresses in particular the following aspects: 
    <\/p>\n\n\n\n