Data Processing Addendum

Scope

This addendum applies where Irmu processes personal data on your behalf and forms part of the Terms of Service. It prevails over conflicting terms in respect of personal data.

Processor obligations

We process personal data only on your documented instructions, ensure personnel are bound by confidentiality, and implement appropriate technical and organisational measures including encryption, access control and audit logging.

We assist you with data subject requests, security notifications and impact assessments, and delete or return personal data at the end of the agreement.

Subprocessors

You give general authorisation for our subprocessors, the current list of which is available on request from info@irmu.com. We give 30 days' notice before adding a new one, and you may object on reasonable data protection grounds.

Information and cooperation

We make our security documentation available on request and answer security questionnaires directly. We do not hold third-party audit or certification reports today; if that changes we will say so here.

Questions about this document can be sent to info@irmu.com or by post to Irmu LLC, 5437 Cove Cir, Naples, FL 34119, United States.