Applies to every Budget Stress Test and Studio subscription. Sub-processors, security, deletion, breaches, transfers.
This agreement applies to every Budget Stress Test and every Studio subscription, as part of the terms. It sets out how ScenarioCast (the processor) handles the personal data inside the workbooks a customer (the controller) sends, as required by article 28 of the GDPR. A countersigned copy is available on request.
Processing of the personal data contained in the customer's planning workbooks, for as long as the agreement runs plus the deletion period in section 7.
Storing the workbook versions, reading them with the simulation engine, running scenarios and producing reports, all on the customer's instruction through the Studio or the engagement. No other purpose.
Names and roles of the customer's employees named as assumption owners, and the email addresses of the customer's users of the Studio. Workbooks should not contain ledger entries, customer lists, payroll or other personal data; the customer agrees not to upload them.
ScenarioCast processes the data only on the customer's documented instructions, which are the Studio's functions and the engagement scope, unless the law requires otherwise. Staff with access are bound by confidentiality.
TLS in transit, Google-managed encryption at rest, one workspace per company isolated by login, authentication through Google Firebase, sessions that expire after 14 days, no public links to any file, and deletion on request. The security page is the current statement of these measures.
Google Cloud (hosting, storage and the engine, europe-west1; a US region on request), Google Firebase (authentication), Vercel (the public website and the booking page). We tell customers by email at least 30 days before adding a sub-processor; a customer who objects can end the agreement without penalty.
On cancellation, or whenever the customer asks, every workbook version and the run history is deleted within five business days and the deletion is confirmed by email. The customer downloads whatever it wants to keep before that; the Excel template and the reports are in the customer's own files already.
ScenarioCast helps the customer answer data-subject requests and security questionnaires, and makes the information needed to show compliance available, including a call with the person who built the system. A personal-data breach affecting customer data is reported to the customer's named contact without undue delay and at the latest within 48 hours of discovery.
Data stays in the EU unless the customer asks for the US-region deployment. Where a sub-processor moves data outside the EU, the EU standard contractual clauses in that sub-processor's terms apply.
// ScenarioCast, Amsterdam, the Netherlands · questions: hello@scenariocast.io · last updated 3 October 2026