Your data is isolated per tenant at the database level, and access is logged.
Every record you create belongs to your organisation and is isolated at the database level by row level security, not merely hidden by the interface. Another customer of Priva cannot read your records even if they were to query the database directly.
Priva support staff can view a tenant workspace only through an explicit, banner flagged session, and those sessions are written to an audit log that you can read.
Priva acts as a processor for the personal data you put into the platform, under the data processing agreement you accepted when your account was created. That agreement sets out what we may and may not do with it.
The published list of sub-processors, the third parties that can technically come into contact with your data, is kept current and available on request.