Data Processing Addendum
For business customers who need a processor agreement covering personal data inside their documents.
Roles
Where you upload documents containing personal data, you are the controller and Senithu Software Solutions is the processor. We process that data only on your documented instructions, which are given by your use of the service.
Scope of processing
Subject matter: optical character recognition and structured extraction from documents you submit. Duration: for as long as your account is active, plus the retention period. Categories of data: whatever appears in the documents you upload, which may include names, addresses, financial details and identification numbers.
Security measures
We maintain encryption in transit, key-only server access with password authentication disabled, default-deny network filtering, automated intrusion banning, least-privilege service accounts, and default-deny database rules.
Sub-processing
We use the sub-processors listed on the Sub-processors page. We will give notice before adding a new sub-processor, and you may object on reasonable data-protection grounds.
International transfers
Document processing and storage take place in Frankfurt, Germany. Where a sub-processor transfers data outside the EEA, that transfer relies on Standard Contractual Clauses or an adequacy decision.
Return and deletion
Documents are deleted automatically on the published retention schedule. On termination you may export your data, after which we delete it within 30 days except where law requires us to keep a record.
Contact
Questions about this document, or a request relating to your data, go to VisionParse@senithu.lk. We answer data requests within 30 days.