Data Processing Addendum
Roles
Customer acts as data controller. HR Electronics OÜ acts as processor and processes personal data solely on documented instructions.
Security
We maintain SOC 2-inspired controls: encryption in transit and at rest, MFA on tooling, least-privilege access, and quarterly audits.
Sub-processors
Primary infrastructure: Vercel (EU), Hetzner (EU), DigitalOcean (EU), Atlassian Cloud, and Google Workspace. New sub-processors are communicated 30 days in advance.
Data subject requests
We assist controllers in fulfilling DSARs within 5 business days.
Term
The DPA remains in force as long as FastModern processes customer data. Upon termination, data is deleted or returned within 30 days.