Where everything is
Nothing a session makes is stored with a cloud service or sent to an analytics company.
What is kept, and for how long
These come from the lab's own settings right now, not from a policy written once. When an administrator changes them, this table changes too.
Private networks end here
To test an app that only works inside your company network, you run a small connector on your side. It dials out to the lab over one encrypted connection, and only the hosts both you and the lab have listed can be reached through it. The tunnel ends at the lab in Johannesburg;
Sharing a defect
After every session
When you hand a phone back, before the next person gets it:
Documents for your compliance team
Both are templates filled in with this lab's real retention figures. Neither is legal advice, and STX Device Lab claims no certification.
POPIA and NDPA data protection statementWhat is processed, where, why and for how long, for South Africa and Nigeria.
Template — have your legal adviser review before use
Download (Markdown)Template — have your legal adviser review before use
Data processing agreementBetween your company and the lab, with its retention and security schedule.
Template — have your legal adviser review before use
Download (Markdown)Template — have your legal adviser review before use