Use & Processing · Permission or license
Wire may access Drive Content in decrypted form when reasonably necessary to run and secure the service
Wire may technically access Drive Content in decrypted form where reasonably necessary to provide, maintain, secure or support the service. The purposes given include troubleshooting, abuse prevention and integrity or security. The schedule says this is subject to appropriate access controls.
Supporting quotations
Wire may technically access Drive Content in decrypted form where reasonably necessary to provide, maintain, secure or support the Service, including for troubleshooting, abuse prevention, and integrity/security purposes, subject to appropriate access controls.
Qualifications & exceptions
- Limited to cases "reasonably necessary" to provide, maintain, secure or support the service.
- The purposes are introduced by "including", so the listed ones are examples rather than a closed list.
- Subject to "appropriate access controls".
Not stated here
- The access controls are not described, and the text does not say whether access is logged or whether the Customer is told.
Use & Processing · Company practice
Drive runs server-side previews, indexing, version control and security scanning
Server-side processing may occur for four things: preview and thumbnail generation, indexing and search, version control and collaboration features, and security scanning, including malware detection and prevention.
Supporting quotations
Server-side processing may occur for: (i) preview and thumbnail generation; (ii) indexing and search functionality; (iii) version control and collaboration features; and (iv) security scanning (including malware detection and prevention mechanisms).
Qualifications & exceptions
- Phrased as processing that "may occur", not as processing that always occurs.
Not stated here
- The text does not say whether files are opened in readable form for each of these steps.
Use & Processing · Company practice
In Wire's public cloud, Wire acts as processor under the DPA and hosting is in the agreed region
Where Wire Drive is provided in Wire's public cloud environment, three things apply: Wire acts as processor under the DPA, the subprocessors listed in the Agreement apply, and the infrastructure is hosted in the agreed region.
Supporting quotations
Where Wire Drive is provided in Wire’s public cloud environment: (i) Wire acts as processor under the DPA; (ii) Subprocessors listed in the Agreement apply; and (iii) infrastructure is hosted in the agreed region.
Qualifications & exceptions
- Applies only to the public cloud deployment; private cloud and on-premises deployments are covered separately in 7.2 and 7.3.
Not stated here
- The DPA, the list of subprocessors and the agreed region are not in this document.
- The text does not say who the controller is.
Use & Processing · Company practice
Wire says it does not actively monitor Drive Content, yet may access and scan it for security
Wire does not actively monitor Drive Content. Other parts of the schedule still allow Wire to technically access Drive Content in decrypted form where reasonably necessary, including for abuse prevention and security (section 2.2), to run server-side security scanning (section 2.4) and to use automated security measures (section 8.4). The schedule does not say how "does not actively monitor" fits with those provisions.
Supporting quotations
Wire does not actively monitor Drive Content.
Wire may technically access Drive Content in decrypted form where reasonably necessary to provide, maintain, secure or support the Service, including for troubleshooting, abuse prevention, and integrity/security purposes, subject to appropriate access controls.
Qualifications & exceptions
- The no-monitoring sentence says "actively"; the permitted access and scanning are tied to providing, securing or supporting the service and to security risks.
Not stated here
- The schedule does not define active monitoring or reconcile it with the access and scanning provisions.
Cross-references
Use & Processing · Context
Personal data processed in Wire Drive is governed by a separate Data Processing Agreement
Processing of personal data within Wire Drive is governed by the Data Processing Agreement (the "DPA"). This schedule does not itself set out the personal data terms.
Supporting quotations
Processing of personal data within Wire Drive is governed by the Data Processing Agreement (“DPA”).
Qualifications & exceptions
- The statement concerns personal data processed within Wire Drive.
Not stated here
- The DPA is not part of this document, so its terms are not known from this source.