Define dataset ownership, permitted purposes, study and organisation access, provenance, quality checks, reuse rights, retention, return and deletion. Confirm these controls for the customer service and each provider before live use.
← Trust Centre
Privacy and data handling
Know what data enters, why it is used and when it leaves.
Before sharing information, agree who will use it, why they need it, where it will be stored and when it will be deleted. The arrangements depend on whether you are making an enquiry, evaluating Tenvia or using a contracted service.
Public information · Reviewed 27 September 2026
Tenvia will not use a generic privacy statement to blur the difference between website visitors, business contacts, users and clinical study data.
Check which documents are available →
The public examples use sample data. Check what is available for an evaluation and which security and quality documents can be shared before sending sensitive information.
Evidence to review
What your team needs to know.
Use this list to plan your checks. A listed safeguard is something to verify, not confirmation that it is in place or that supporting documents can be shared.
Review areaCurrent statusPublic information
Agree who decides how personal data is used (the controller) and who processes it on their behalf (the processor), for each service and study.
Only data needed for the agreed service purpose should be collected. Use sample data for initial evaluation. Any other data requires an agreed scope and privacy review.
Before live use, agree and verify how long data is kept, how it is returned or deleted, and what happens to backup copies.
Before live use, confirm the provider list, why each provider processes data, where this happens and how changes are handled.
Legal and privacy teams must check the terms and safeguards for each international data transfer.
The data processing agreement (DPA) defines help with privacy rights requests, incidents, assessments and regulator enquiries.
Common questions
Answers for your supplier review.
These answers describe what is publicly confirmed. Check the agreed safeguards and supporting evidence for the service you plan to use.
Request supporting documentsDemo and supplier-review enquiries submit business contact details through HubSpot so Tenvia can follow up. Your reviewed enquiry brief accompanies your contact details. Do not include patient information or confidential study documents.
Documents to request
Ask what evidence is available for your review.
The list below shows documents you may need for a supplier review. We must confirm which are available and can be shared before granting access.
01Processing overviewCheck availabilityOn request
02Data flow mapCheck availabilityOn request
03DPA and transfer packageCheck availabilityOn request
04List of third-party data processorsCheck availabilityOn request
05Retention and deletion scheduleCheck availabilityOn request
Security & supplier review
A clear path
to your review.
Explore the product, discuss a study or request assurance evidence. Choose the conversation your team needs.
What would you like to review?
01 / Choose your reviewConfidentiality agreement and approved access
Tell us which security, privacy, quality or architecture evidence your team needs to review.
Your review
02 / Describe your prioritiesPlease keep patient information and confidential study documents out of this request.
Submit your enquiry directly through HubSpot.
Tenvia will contact you to follow up.
Prefer a direct conversation?