Data Processing Addendum
Last updated May 1, 2026
This summary is written to be readable. It isn’t a substitute for legal advice. Questions? Contact us.
Roles
For customer data processed on your behalf, you are the controller and Yadi is the processor. This DPA forms part of our agreement where data protection law applies.
Processing scope
We process data only to provide the service and on your documented instructions, including the tasks and automations you configure.
Subprocessors
We use a vetted set of subprocessors (cloud hosting, model providers, the OAuth broker). A current list is available on request, with notice of changes.
Security
We maintain technical and organizational measures including encryption in transit and at rest, scoped access, and an append-only audit log.
International transfers
Where data is transferred across regions, we rely on Standard Contractual Clauses and offer regional residency on Enterprise.