Data Processing Addendum
Last updated November 7, 2026
Scope
This addendum applies where Aisha processes personal data on behalf of a customer.
Roles
The customer is the controller and Aisha is the processor for customer personal data.
Processing instructions
Aisha processes customer personal data only on documented instructions from the customer.
Security measures
Encryption, access control, logging, vulnerability management and incident response.
Sub-processors
Aisha uses vetted sub-processors under written agreements with equivalent protections.
Data subject requests
Aisha assists customers in responding to data subject requests.
Deletion
On termination, customer personal data is deleted or returned as instructed.