# Data Processing Addendum

The Vaultody Data Processing Addendum (DPA) governs the processing of personal data where Vaultody Ltd. acts as a data processor on behalf of a client (data controller). It covers scope and roles, GDPR requirements (Article 28 obligations, sub-processor engagement, security measures, breach notification, records of processing, data-subject request assistance), international data transfers (Standard Contractual Clauses where applicable), audit rights, and the interaction with the DWaaS Software as a Service Agreement and Privacy Policy. Read the full DPA at [/data-processing-addendum](/data-processing-addendum).