1. Definitions
Personal Data
Any information relating to an identified or identifiable natural person.
Data Processor
Leadyol, which processes data on behalf of the Data Controller.
Data Controller
The entity that determines the purposes and means of processing.
2. Scope
This agreement applies to all personal data processed by Leadyol on behalf of the Data Controller in connection with the provision of services.
3. Data Processor Obligations
- Process data only as instructed by the Data Controller
- Ensure confidentiality of personal data
- Implement appropriate technical and organizational measures
4. Security Measures
AES-256 Encryption
SOC 2 Compliance
Annual Pentests
5. Data Breach Notification
In the event of a data breach, Leadyol will notify the Data Controller within 72 hours of becoming aware of the breach.
6. Subprocessors
Leadyol may engage subprocessors only with prior written consent. Current subprocessors include:
- AWS (Cloud Hosting)
- Twilio (Communication Infrastructure)
- Stripe (Payment Processing)