Data Processing Addendum

This DPA forms part of the Terms of Service. Authorise acts as Processor for personal data submitted into the platform by tenant users. The Tenant is the Controller and instructs Authorise to process the data solely to deliver the approvals service.

Categories

Account identifiers, request metadata, attachments uploaded by users, audit metadata.

Security

Data encrypted in transit and at rest. Files stored in a private object store. Access scoped per tenant via row-level security.

Subprocessors

See the Privacy Policy for the current subprocessor list. Notice of changes will be sent to the Tenant admin.