Data Processing Addendum

The customer is controller for tenant data and Prefometry's operator acts as processor, processing data only to provide, secure, support, and delete the contracted service.

The service applies tenant isolation, least-privilege service credentials, encrypted transport, audit trails, private evidence storage, signed billing events, and incident procedures. Current subprocessors are identified in the Privacy Policy and deployment agreement.

The operator assists with data subject requests, security incidents, and reasonable audits. At termination, customer data is exportable and is deleted through the documented recovery and purge workflow, subject to mandatory legal retention. Encrypted disaster-recovery copies remain isolated from ordinary processing and are scheduled to expire through the 14-daily/8-weekly rotation within 70 days; deletion records are re-applied after a restore.