Data Processing Addendum
This section outlines baseline processing commitments for enterprise customers where IRU Shield processes personal data on behalf of a customer organization.
1. Roles
Where applicable, the customer acts as controller and IRU Shield acts as processor for customer-submitted or customer-managed personal data processed to provide the contracted service.
2. Instructions
IRU Shield will process covered personal data only on documented customer instructions, except where required by applicable law or necessary to maintain platform security and service continuity.
3. Subprocessors
IRU Shield may use subprocessors for hosting, analytics, support, billing, and communications. Appropriate contractual safeguards should be maintained for such processing relationships.
4. Assistance
Where appropriate and feasible, IRU Shield may assist customers with data subject requests, breach review, retention controls, or regulatory response consistent with service design and applicable law.