Data Processing Agreement

1. Scope & Roles

This Data Processing Agreement supplements the terms for institutional and enterprise tenants. The Customer acts as Data Controller, and AxiomIQ processes data strictly on documented instructions as Data Processor.

2. Security Measures

AxiomIQ implements technical and organizational security measures including row-level encryption, multi-tenant database isolation, rate limiting, and immutable audit trails.

3. Subprocessors

A current register of approved infrastructure subprocessors (PostgreSQL, Valkey, Cloudflare R2, Stripe) is maintained and made available to institutional customers with notification of updates.