This draft separates responsibilities before a worker document enters the system. It is not an executed agreement.
The customer determines purposes, document categories, and applicable rules; DIES Veredicto processes only documented instructions.
Scope may include workers, contractors, official documents, identifiers, images, and derived technical evidence.
Tenant isolation, opaque credentials, traceability, and least privilege form part of the intended service.
Every external provider, residency condition, and applicable transfer must be declared before real data leaves the trusted boundary.
Periods and cold retirement will follow purpose, legal duty, and account state through auditable operations.
The signed version will define notice, cooperation, data-subject requests, audit, and authorized contacts.