Draft pending legal review. Not yet binding.
Data Processing Addendum
1.Roles
You are the controller of documents and personal data you send. InkRelay acts as your processor.
2.Instructions
We process data only to provide the service and as you instruct through the API and dashboard.
3.Security
TLS in transit, encryption at rest, least privilege access, audit logging and tested backups.
4.Sub processors
The processors listed in the Privacy Policy. We notify owners 30 days before adding one.
5.Breach notice
We notify owners without undue delay and within 72 hours of becoming aware of a personal data breach.