Compliance with GDPR

Roam is committed to strong privacy, security, and data protection practices and supports customer compliance with the General Data Protection Regulation (GDPR).

Customers may use Roam for programs and workflows that involve personal data of individuals in the European Economic Area (EEA), in accordance with applicable data protection requirements. For most use cases Roam acts as a data processor on behalf of our customers, who remain the data controller.

Roam implements appropriate technical and organizational measures to protect personal data, maintains relevant documentation, supports customer obligations related to data subject rights requests, and limits data processing to documented customer instructions.

Roam’s DPA is incorporated by reference into our standard Enterprise Agreement. For international data transfers, the DPA includes the European Commission–approved Standard Contractual Clauses (SCCs), where applicable.

For questions regarding GDPR, data processing terms, or to request a copy of the DPA, please contact privacy@ro.am.