Data Processing Addendum

Effective 1 June 2026. This summary explains the DPA structure available for Team and Enterprise customers.

Roles

The customer is the controller of personal data in workbooks and business systems. HISAB acts as processor when it processes customer data to provide the service.

Processing scope

Processing is limited to providing Excel automation, AI-assisted analysis, ERP connectivity, account administration, security, support, and billing.

Sub-processors

HISAB uses Paddle (payments), Render (hosting), Cloudflare (network), Resend (email) and, for the website's support chat, Groq. When you use HISAB AI, your AI requests pass through HISAB's server, which uses them only to meter credits and never stores them, to the provider of the model you choose: Anthropic, Z.ai, Moonshot AI or DeepSeek (see the Privacy Policy). With Own AI, AI requests go directly to your own provider and HISAB is not a processor of them. Enterprise customers can request notification terms for changes to this list.

Security measures

Controls include least-privilege access, encrypted transport, credential isolation, audit logging, approval workflows, and retention policies aligned to the selected plan.

Customer assistance

HISAB will help customers respond to data subject requests, security reviews, and deletion/export obligations where the requested data is under HISAB control.

Enterprise terms

For a signed DPA, MSA, or security package, contact support@hisab360.net.