Data Processing Addendum

Effective 14 May 2026. This summary explains the DPA structure planned for Team and Enterprise customers.

Roles

The customer is the controller of personal data in workbooks and business systems. HISAB acts as processor when it processes customer data to provide the service.

Processing scope

Processing is limited to providing Excel automation, AI-assisted analysis, ERP connectivity, account administration, security, support, and billing.

Sub-processors

Production deployments may use payment, hosting, email, support, analytics, and AI infrastructure providers. Enterprise customers can request a current sub-processor list and notification terms.

Security measures

Controls include least-privilege access, encrypted transport, credential isolation, audit logging, approval workflows, and retention policies aligned to the selected plan.

Customer assistance

HISAB will help customers respond to data subject requests, security reviews, and deletion/export obligations where the requested data is under HISAB control.

Enterprise terms

For a signed DPA, MSA, or security package, contact legal@hisab360.com.