Data processing agreement

DRAFT, for legal review. This text is not final.

1. Roles

The club is the controller. We process personal data on its documented instructions to provide the service.

2. Security

Tenant isolation, encrypted credentials, audited access, backups and breach notification without undue delay.

3. Sub-processors

We use the sub-processors listed on the Sub-processors page and announce changes in advance. Placeholder text pending legal review.