Legal

Data processing addendum

Processor obligations for customer decision records, workspace data, subprocessors, deletion, export, and security commitments.

Roles

For customer decision records and workspace data, the customer is the controller or business and DecisionsLayer is the processor or service provider, unless a signed agreement states otherwise.

Processing scope

Processing includes ingestion, storage, search, timeline reconstruction, observability metrics, anomaly and alert evaluation, intelligence analysis, optimization workflows, support, security, and deletion/export operations.

Customer instructions

DecisionsLayer processes customer data according to the agreement, product configuration, API requests, support instructions, and documented security obligations.

Subprocessors

DecisionsLayer uses subprocessors for cloud hosting, email delivery, analytics, support, and payment processing. We keep the list current and notify customers of material changes.

Deletion and return

Customers can request deletion or export of workspace data subject to legal retention requirements, backup windows, and security logs.