Data Processing Agreement
Draft — requires review by legal counsel before launch.
Roles
For account data, the customer is the data controller and The Accounting Tools is the data processor. For document content, The Accounting Tools acts as a processor only for the brief moment a file passes through the server-side conversion service — client-side tools involve no processing by us at all.
Nature of processing
Client-side tools: no data is transmitted to us. Server conversions: files are processed transiently in memory and deleted immediately; no persistent storage, no logging of contents.
Sub-processors
Hosting (Vercel), the conversion container host, and the payment processor (Stripe). A current list is available on request.
Security & sub-processing
Encryption in transit, least-privilege access, and immediate deletion after conversion. International transfers are covered by standard contractual clauses where applicable.
Request a DPA
Business customers can request a signed DPA at legal@theaccountingtools.example — replace with a real contact address.