Data Processing Addendum
Last updated June 2026 · Template — review by counsel before publication
This Data Processing Addendum (DPA) describes how OpenFinLab processes personal data on behalf of customers. It is provided as a template and forms part of the applicable services agreement when executed.
Roles
Where we process personal data on your behalf, you act as controller and we act as processor, processing data only on your documented instructions.
Security measures
We maintain technical and organizational measures including access controls, encryption, audit logging, isolation, and PII de-identification appropriate to the risk.
Sub-processors
We maintain a list of approved sub-processors and provide notice of changes as set out in the services agreement.
International transfers
Where personal data is transferred across borders, we rely on appropriate safeguards consistent with applicable data protection law.