Data Processing Addendum (GDPR Art.28)

This DPA governs processing we perform on your behalf:

• Roles: Customer is Controller; ABC-AI Internet Solutions (redot1 / abc-io.online) is Processor for customer content.
• Sub-processors: Stripe (payments), our sovereign hosting provider. Listed on request.
• Security: Art.32 measures — encryption at rest/in transit, access controls, Vault-managed secrets.
• Breach: we notify within 72h of becoming aware.
• Deletion: on term, we delete or return data within 30 days.
• International transfers: SCCs where required.