Appearance
Data Processing Addendum
Available on request.
The formal DPA — controller and processor roles, sub-processor list, transfer mechanisms (SCCs / UK IDTA), TOMs — is sent to anyone who asks. Email hello@errlens.com.
What's in it (preview)
- Roles: Brindleford Technologies as processor for event and issue data; controller for account data.
- Sub-processors: primary hosting in the EU; off-platform backups with a separate EU provider. Named in the DPA on request, updated on change.
- Transfer mechanism: EU SCCs / UK IDTA as appropriate.
- Technical and organisational measures: PII scrub at ingest, TLS 1.2+, database-level tenant isolation, signed webhooks, encrypted-at-rest backups.
- Retention: configurable per project (defaults at GA).
- Sub-processor notification: 30 days' prior notice before new sub-processors handle event data.