Data Processing Agreement
Data Processing Agreement
Last Updated: September 29, 2026 · Adommo LLC
Scope
This Data Processing Agreement (“DPA”) supplements the Adommo LLC Terms of Service and governs the processing of personal data on behalf of the Client (“Data Controller”) by Adommo LLC (“Data Processor”).
Obligations of the Processor
Adommo LLC shall:
- Process personal data only on documented instructions from the Controller.
- Ensure that persons authorized to process personal data are bound by confidentiality obligations.
- Implement appropriate technical and organizational measures to ensure security of processing (AES-256 encryption at rest, TLS 1.3 in transit).
- Assist the Controller in fulfilling data subject access requests within the required timeframes.
- Delete or return all personal data upon termination of services, within 14 calendar days.
- Make available all information necessary to demonstrate compliance and allow for audits.
Sub-Processors
Adommo LLC uses the following sub-processors for service delivery:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database hosting & storage | United States |
| Vercel | Website hosting & CDN | Global (US primary) |
| Google Workspace | Email & calendar | Global |
We will notify the Controller of any intended changes to sub-processors with at least 30 days' prior notice.
Data Deletion
Upon termination of the engagement, all personal data and diagnostic artifacts are purged within 14 calendar days. A certificate of destruction is available upon request.
Contact
For DPA execution or inquiries, contact [email protected].