Data Processing Addendum
Last updated August 2026
Roles
You are the data controller; MultiPost Studio is the processor acting on your documented instructions.
Sub-processors
We use a short list of infrastructure and AI sub-processors. The current list is available on request and we give notice before adding one.
Security measures
- Encryption in transit and at rest.
- Access on a least-privilege basis with audit logging.
- Tenant isolation enforced at the query layer.
International transfers
Where data leaves its region, we rely on Standard Contractual Clauses and equivalent safeguards.
Deletion
On termination we delete or return personal data within 30 days, subject to backup cycles.
A signable version is available for Team and Enterprise customers — contact multipoststudio@gmail.com.