Legal
Data Processing Addendum
Last updated: May 1, 2026
1. Roles
Customer is the data controller; Anysola is the data processor. This DPA forms part of the master services agreement between the parties and governs all personal data Anysola processes on behalf of Customer.
2. Scope and purpose of processing
Anysola will process personal data only to provide the service described in the order form, comply with documented customer instructions, and meet legal obligations.
3. Subprocessors
Anysola maintains a current list of subprocessors at anysola.com/legal/subprocessors. Customer is notified at least 30 days before any new or replacement subprocessor is engaged. Customer may object on reasonable grounds within that period.
4. Security measures
Anysola maintains technical and organizational measures aligned with SOC 2 Type II, including encryption in transit and at rest, role-based access controls, audit logging, network isolation, and an incident response program. A current summary is available on request.
5. International transfers
Where personal data is transferred outside the EU/EEA or UK, the EU Standard Contractual Clauses (Module Two) and the UK International Data Transfer Addendum apply and are incorporated by reference.
6. Data subject requests
Anysola will assist Customer in responding to data subject access, correction, deletion, and portability requests within the timeframes required by applicable law.
7. Incident notification
Anysola will notify Customer without undue delay, and in any event within 72 hours, after becoming aware of a personal data breach involving Customer data.
8. Audit
On reasonable notice and no more than once per 12 months, Customer may audit Anysola's compliance with this DPA, or rely on the most recent SOC 2 Type II report and penetration test summary.
9. Deletion at termination
Within 90 days of contract termination, Anysola will delete or return all personal data unless retention is required by law. Backups are purged on the standard rotation schedule documented in the security summary.