A practical data-processing review for each product.
A data-processing addendum should be completed when a customer asks Waconzy or a delivery provider to process personal data on the customer’s behalf. The right terms depend on roles, jurisdictions, data, vendors, and the actual service.
Roles and instructions
Identify the customer’s role, the service provider’s role, the documented processing instructions, the purpose, duration, categories of people, categories of data, and any prohibited use.
Subprocessors
Record hosting, database, storage, email, AI, monitoring, support, payment, and other subprocessors that handle the data. Changes should have a notice and objection process appropriate to the agreement.
Security measures
Describe access control, confidentiality, encryption, resilience, backup, recovery, testing, logging, incident response, deletion, and assistance obligations in terms that match the implementation.
Data subject support
Define how access, correction, deletion, export, restriction, objection, breach, and regulator requests are routed and supported.
International transfers
Document approved transfer mechanisms, regional hosting, supplementary measures, and any customer instructions for cross-border processing.