Data processing

For customer workspace content, Noon is designed to process data only as needed to provide the customer-requested service, maintain security, and meet legal obligations. A signed agreement controls the parties’ legal roles, instructions, and any jurisdiction-specific terms.

Noon uses account-scoped access controls, authenticated sessions, encrypted integration credentials, audit logging, network segmentation, bounded provider calls, and approval-gated external writes. See Trust & Security for the current technical summary.

Service categories and externally connected providers are described in the subprocessor notice. Customers remain responsible for the providers and scopes they choose to connect to Noon.

A signed data-processing addendum is available through the contact channel published in your Noon account or commercial agreement for eligible commercial customers.