Legal Documentation and Compliance¶
Contractual framework, MazeVault's position towards regulated customers, and materials for supplier assessment
Last Updated: 2026-05-01
Purpose¶
This section contains the information a regulated Customer (in particular a financial entity) needs in order to fulfil its own statutory obligations when purchasing and using MazeVault software: supplier assessment, contractual assurance of security requirements, entry in the supplier register / register of information, incident handling and termination of the relationship.
The section deliberately states only what follows from legal regulations and from the concluded contractual documentation. It does not replace the contractual documents — in the event of a conflict, the License Terms, SLA, DPA and List of Required Software in their current wording always prevail.
Technical security documentation (encryption, RBAC, audit logging, key management) is located in the Security section.
Provision Model — In Brief¶
| Role | |
|---|---|
| Provider — MAZEVAULT s.r.o. | Author and holder of the economic rights to the software. Grants the license to the Customer directly. Releases updates and security patches, provides upstream support to the Partner. Does not operate infrastructure, does not host the Product or Customer data, and has no standard access to them. |
| Partner — reseller | Sells licenses, handles deployment and is the Customer's sole contact for technical support. The SLA and DPA are concluded with the Partner. |
| Customer | Operates the Product in its own infrastructure (on-premise or own cloud tenant), is responsible for operation, backups, access and encryption keys; is the controller of personal data. |
Documents¶
| Document | Intended for | Content |
|---|---|---|
| Contractual Documents | Everyone | Overview of contractual documentation, who concludes what with whom, rules of precedence |
| Information for Regulated Entities — Act No. 264/2025 Coll. / NIS2 | Customers subject to obligations under the Cybersecurity Act | MazeVault's position as a supplier, materials for supplier assessment, contractual assurance of requirements |
| Information for Financial Entities — DORA | Banks and other financial entities | Position under DORA, data for the register of information, mapping of Art. 30 to contractual documents, exit |
| Personal Data Protection | Everyone | Roles under GDPR, what MazeVault processes, data subject rights, breach notification |
| Handling of Security Incidents and Vulnerabilities | Everyone | Who notifies whom and within what time limits, security advisories, contacts |
| Continuity of Product Provision and Lifecycle | Everyone | What MazeVault ensures on a continuous basis, dependency on the license server, version lifecycle |
| Subprocessor and Supplier List | Everyone | Sub-processors of personal data and MazeVault suppliers relevant to the service |
| Compliance Evidence and Reporting | Customer auditors | Built-in Product features: audit log, compliance reports, Auditor role |
Contact¶
The Provider's single communication channel for legal, security and GDPR matters: info@mazevault.com. The Customer handles technical support with the Partner via the channel specified in the Order.