Template for review: this text has not been reviewed by a lawyer. Bracketed items must be completed, and the whole document must be approved by qualified counsel before launch.
1. Scope and roles
This Addendum forms part of the Terms of Service. The Customer is the controller (or business) and [Company legal name] is the processor (or service provider) of personal information contained in Customer Data.
2. Processing instructions
We process Customer Data only to provide the Service, as documented in the Terms, and on the Customer’s documented instructions given through the Service settings or in writing.
3. Confidentiality and personnel
Personnel with access to Customer Data are bound by confidentiality. Support access to an organization requires the owner’s opt-in, is time-limited, read-only, and recorded in the organization’s audit log.
4. Security measures
We maintain technical and organizational measures including:
- Encryption in transit (TLS with HSTS) and encryption at rest for databases and storage.
- Tenant isolation through application filters and database row-level security.
- Mandatory two-step sign-in for staff users and role-based access per organization.
- Encrypted storage of integration secrets.
- Audit logging of membership, billing, and support-access events.
5. Subprocessors
The Customer authorizes the subprocessors listed on the Subprocessors page. We will give [30] days’ notice of new subprocessors, during which the Customer may object.
6. Assistance and breach notification
We will help the Customer respond to data subject requests and notify the Customer without undue delay, and within [72 hours], after becoming aware of a personal data breach affecting Customer Data.
7. Deletion and return
On termination, the Customer may export Customer Data for [90] days; afterwards we delete it from production systems, with backups expiring on their normal schedule.
8. International transfers and audits
[Standard contractual clauses, transfer mechanisms, and audit rights to be drafted by counsel.]