Legal · draft-2026-10-21
Data Processing Addendum
Processor terms for customer personal data processed through trilinkai.
The English version controls. Localized navigation is provided for usability; legally approved translations must be attached to the same document version before they are treated as controlling.
Roles and scope
The customer is the controller or business responsible for personal data submitted to the service. trilinkai acts as a processor or service provider for that data, unless a separate written agreement states otherwise.
The DPA applies to personal data processed to provide the service and lasts for the duration of the service agreement.
Processing instructions
trilinkai processes personal data on documented customer instructions, including configuration, API requests, security controls, and support instructions.
trilinkai will notify the customer if an instruction appears unlawful, unless prohibited by law.
Security and confidentiality
trilinkai maintains technical and organizational measures appropriate to the risk, including access control, tenant isolation, encryption of secrets, logging, backup, and incident response.
Personnel authorized to process customer data are subject to confidentiality obligations.
Subprocessors and transfers
Authorized subprocessors are listed on the Subprocessors page. The customer may object using the DPA contact where required by applicable law.
International transfers require appropriate safeguards under the applicable legal framework.
Incidents, assistance, and deletion
trilinkai will notify the customer of a confirmed personal-data breach without undue delay using dpa@trilinkai.com.
trilinkai provides reasonable assistance for data-subject requests, assessments, and consultations, and deletes or returns data at termination subject to legal retention and legal hold.
Operator and contact
[Legal entity name must be configured], [Registered address must be configured].
Legal notices: legal@trilinkai.com.
Document version: draft-2026-10-21.