Data processing addendum · updated 2026-07-31

Processing follows the configured deployment boundary.

Scope and roles

This addendum applies when the operator identified at checkout processes personal data on behalf of a customer while providing Adranum. The customer determines the permitted systems, artifacts, users, purposes, retention, and deployment configuration and remains responsible for lawful instructions.

Processing and confidentiality

Adranum processes account, workspace, billing, integration, decision, approval, and audit information needed to provide and secure the service. Authorized personnel and subprocessors are subject to confidentiality obligations appropriate to their role.

Security and customer-local data

The service supports tenant-scoped authorization, encrypted secrets and artifacts, bounded uploads, hash-linked evidence, secure sessions, health checks, backups, and deletion controls. A split-plane deployment keeps raw Service Data and production credentials inside the customer operator while the control plane receives signed commands, aggregate outcomes, and lineage hashes.

Subprocessors and transfers

Configured hosting, authentication, billing, model, email, backup, and integration providers act only for the enabled service paths. Customers may disable third-party model execution or use a compatible customer-VPC endpoint where configured. Applicable transfer safeguards depend on the contracting entity and deployment selected at checkout.

Requests, incidents, return, and deletion

Adranum will provide reasonable assistance with data-subject requests, security incidents, assessments, and deletion consistent with the service and applicable law. Workspace deletion removes retained application records and objects; independently encrypted backups expire under the operational recovery schedule.

Contact and execution

Questions and signed addendum requests may be sent to the legal contact shown at checkout. The definitive addendum identifies the customer, operator, governing terms, effective date, and any approved changes.