Data Processing Addendum (DPA)

Securelytix processes personal data solely to provide the Services requested by the customer, including:

• Tokenization of sensitive information
• Secure vault storage
• Controlled restoration of protected data
• Audit logging
• API request processing

We process customer data only according to documented customer instructions.

Depending on how Securelytix is used, personal data may include:

• Names
• Email addresses
• Phone numbers
• Government-issued identifiers
• Financial information
• Customer account details
• Other personally identifiable information submitted through our APIs

Securelytix maintains technical and organizational safeguards designed to protect customer data, including:

• Encryption during transmission and storage
• Strict access controls
• Authentication and authorization
• Comprehensive audit logs
• Secure key management
• Continuous security monitoring

Anyone authorized to access customer data is bound by confidentiality obligations and receives appropriate security training.

Securelytix may engage carefully selected subprocessors to operate the platform, such as cloud hosting or authentication providers.

All subprocessors are required to maintain security standards consistent with this Agreement.

If a customer receives a request from an individual regarding their personal data, Securelytix will provide reasonable assistance to help the customer respond where required by applicable law.

If we become aware of a confirmed security incident affecting customer personal data, we'll notify affected customers without undue delay and provide available information to help them understand the incident and take appropriate action.

Upon termination of the Service, Securelytix will delete or return customer data according to the customer's instructions, unless retention is required by law.

Securelytix is committed to supporting customers in meeting applicable privacy and data protection obligations through secure processing practices and responsible data handling.