Data Processing Addendum
PLACEHOLDER — not legal copy. This document must be replaced with reviewed content before any real customer uses BlockCompliance.
Last updated: [DATE]
1. Roles
Placeholder. The customer (firm) is the data controller for the leaseholder/building personal data it uploads; BlockCompliance is the processor.
2. Scope and purpose of processing
Placeholder.
3. Sub-processors
Placeholder — list infrastructure sub-processors (Supabase, Render, Vercel, Stripe, the email provider) and their regions.
4. Security measures
Placeholder (RLS tenant isolation, encryption in transit, access controls).
5. International transfers
Placeholder (note EU/UK data residency where applicable).
6. Sub-processor changes and audit
Placeholder.