Data Processing Addendum

Last updated 1 Sept 2026

Placeholder document. This text has not been reviewed by a lawyer and is not binding. It describes what each section must cover so the reviewed version can be dropped in without changing the page.

1. Roles

REPLACE WITH REVIEWED TEXT — The agency is the controller for client data it enters; AuditOpti is the processor. Set out the subject matter, duration, nature and purpose of processing.

2. Sub-processors

REPLACE WITH REVIEWED TEXT — The list in the Privacy Policy, plus the notification process for adding a new one.

3. Security measures

REPLACE WITH REVIEWED TEXT — Encryption in transit and at rest, access controls, least privilege, breach notification timelines.

4. International transfers

REPLACE WITH REVIEWED TEXT — Standard Contractual Clauses where applicable, and where data is stored.