Parties, subject and duration
Customer: the subscribing organisation (controller). Processor / service provider: Omar Khandji. This addendum covers processing of customer content solely to provide Unbilled Work Recovery during the subscription and its controlled deletion period. Data subjects may include customer staff, contractors and client contacts; data categories include identifiers, board work evidence, commercial documents and review/ledger records. Do not submit credentials or unnecessary sensitive data. Effective date: October 3, 2026.
Documented instructions
Process only on the customer’s documented lawful instructions, including configured reviews, user-requested optional extraction and support requests. Notify the customer if an instruction appears unlawful, unless law prohibits notice. Required legal processing outside instructions will be disclosed where lawful. No secondary advertising purpose is authorised for customer content.
Confidentiality and security
Limit access to authorised persons bound to confidentiality. Maintain proportionate technical and organisational controls, including tenant-scoped access, role enforcement, separated credential storage, bounded file/AI processing and audit trails. Provide reasonably available information about those controls through the contact below; no security or privacy certification is asserted.
Further processors
The customer generally authorises the subprocessors identified in the dated Subprocessor List for the stated services. Before a material addition or replacement, provide 30 days’ advance notice and allow reasonable objections based on data protection grounds; discuss alternatives or termination where unresolved. Require appropriate processing and confidentiality obligations and remain responsible for processor obligations as required by applicable law. Actual serving entities, supplier agreements and transfer safeguards are verified before optional AI activation.
Rights, assessments and incidents
Reasonably assist the customer with verified rights requests, security information, impact assessments and regulator enquiries, considering available information and the nature of processing. Notify a personal-data breach without undue delay and no later than 72 hours after becoming aware of it. Share known nature, affected categories, likely consequences, mitigation and contact; supplement incomplete initial information. This is processor-to-customer notice, distinct from the customer’s legal reporting deadline.
Deletion or restitution
At termination, coordinate restitution or deletion on documented customer instructions, subject to applicable law and the uninstall deletion commitment. No self-service export feature is promised. We delete app-held active customer content within ten calendar days after uninstall, deauthorisation or termination. Deletion starts through a durable job that revokes access, cancels pending work and removes application records, uploaded/generated objects and credentials. Failed attempts retain retry state for follow-up; the ten-day commitment remains applicable. A minimal installation lifecycle marker and opaque identity tombstone may remain solely to reject stale events and credentials, without contract content or reusable credentials. This active-content commitment does not assert a verified backup erasure schedule: platform backups, operational logs and platform-owned records follow the applicable service terms and legal obligations. We confirm those retention and deletion arrangements with the platform rather than promising instantaneous erasure of every copy.
International transfers
Processing may take place in the United States and other countries through platform and optional model services. Exact deployment/backup regions and AI endpoint locations are verified before processing that requires specific safeguards. Where required by applicable law, establish the appropriate transfer mechanism, including standard contractual clauses and supplementary measures where applicable, before such processing. No unverified agreement or geographic residency guarantee is asserted.
Information and audits
Provide reasonably available evidence of processor controls and assist proportionate audits requested on reasonable notice, subject to confidentiality, protection of other tenants and platform limits. Prefer existing reports and documentary review before intrusive inspection. No access to other customers or unrestricted penetration testing is authorised. Agree reasonable scope, scheduling and any proportionate costs with the customer in advance.
Contact
Privacy, support and security requests: hello@silentcoretech.com. Omar Khandji is the contact responsible for privacy matters. This addendum describes the processing commitments associated with the service and does not claim independent legal review or certification.