Legal
Data Processing
Last updated: March 2026
1. Who processes your data
Evidra (Chennai, Tamil Nadu, India) is the data processor for Readix — the EU e-invoice compliance validation tool at readix.evidra.online. For the purposes of GDPR, Evidra acts as a data processor on behalf of the customer (data controller) when validating invoice documents submitted through Readix.
2. What data is processed
Invoice validation (Readix)
When you upload an invoice for validation, Readix processes the document contents in memory to run compliance checks. This may include:
- Buyer and seller identifiers (company names, VAT/tax numbers, addresses)
- Invoice line items, amounts, and VAT data
- Invoice dates, reference numbers, and payment terms
Contact and inquiry data
When you submit a contact or purchase inquiry, we collect your name, email address, company details, and message content. This is used solely to respond to your inquiry.
3. Data retention
Invoice data: not retained.
Invoice documents and their contents are processed entirely in memory. No invoice data is written to disk, stored in any database, or transmitted to third parties. When your validation session ends, all invoice data is discarded.
Contact and inquiry submissions are retained for up to 12 months for follow-up and customer support purposes, then permanently deleted.
4. Infrastructure and transfers
Readix is hosted on cloud infrastructure. Any transfers of personal data outside the EU/EEA are conducted under Standard Contractual Clauses (SCCs) as required under GDPR Chapter V. For specific hosting location information, contact us at team@evidra.online.
5. Legal basis for processing
Invoice validation data
Processed under Article 6(1)(b) GDPR — necessary for the performance of a contract (the Readix validation service).
Contact and inquiry data
Processed under Article 6(1)(f) GDPR — legitimate interests in responding to business inquiries and completing purchase transactions.
6. Your rights under GDPR
As a data subject, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate or incomplete data
- Request erasure ("right to be forgotten")
- Object to processing or request restriction of processing
- Data portability
- Lodge a complaint with your national supervisory authority
To exercise any of these rights, email team@evidra.online with the subject "GDPR Rights Request". We will respond within 30 days.
7. Data Processing Agreement (DPA)
Enterprise customers who require a formal Data Processing Agreement (DPA) for their procurement or compliance review can request one by emailing team@evidra.online with the subject line "DPA Request". We will provide a signed DPA within 5 business days.
8. Contact
For any data protection questions, concerns, or requests: