Back to blog
Compliance

GDPR and data processing in mapping APIs

B2B best practices for processing client files with AI without retaining data longer than necessary.

When you convert third-party files, your company remains the data controller toward your end clients. Claix acts as data processor under the DPA signed during registration.

Files are processed in the EU and are not used to train models. Define minimum retention in your own systems and document the flow in your privacy policy.

For audits, the history in usage_logs lets you demonstrate which operations ran, when, and with what row volume.