Data Processing Agreement (DPA)

Last updated: 1 July 2026

This DPA supplements the Terms and governs the processing of personal data by ExpertCo on behalf of the client.

1. Roles

The client (accounting firm) is the controller; ExpertCo is the processor.

We process data only per the controller's documented instructions and legal obligations.

Multi-tenant isolation with Row-Level Security, encryption, append-only audit log, and minimization of secrets in logs.

We use sub-processors only with equivalent safeguards and inform you of changes.

We assist with data-subject requests and, upon termination, delete or return data as required by law.

This document is an indicative template and does not constitute legal advice.