Effective Date: August 28, 2026
This Data Processing Agreement ("DPA") supplements the Dawnweave Master Services Agreement between THERUINS ("Processor") and the customer entity ("Controller") governing the processing of personal data.
All customer telemetry, CRM records, files, and contracts are partitioned with tenant-specific Row-Level Security (RLS) policies in PostgreSQL. Storage uploads are cryptographically isolated by workspace and sanitized against MIME type injection.
THERUINS engages vetted infrastructure providers (AWS, Supabase, Cloudflare, Resend) under equivalent data protection commitments. Controllers will receive 30 days notice of any new sub-processor engagement.
Upon termination of service or upon Controller request, all Controller personal data shall be permanently purged or returned within thirty (30) days in accordance with applicable data privacy laws.