Data Processing Addendum

This is a placeholder DPA scaffold. Before launch, replace this with a DPA reviewed by counsel, including the list of sub-processors, international transfer mechanism (e.g. SCCs), and security measures.

Roles

For scan data processed on your behalf, you are the controller and redireo is the processor.

Sub-processors

We maintain a current list of sub-processors and will provide notice of changes.

Security measures

Encryption in transit and at rest, per-tenant isolation, and least-privilege access.