Data Processing Addendum (template)
Template for countersignature with Bacenik. Not a substitute for negotiated enterprise legal review. Controllers should attach this to the MSA / Order Form.
1. Roles
Customer is Controller. Bacenik (operator of CIQ) is Processor for customer tenant data processed to provide Decision Assurance™, Decision Records, Decision Memory™, and related services.
2. Subject matter
Financial evidence (GL imports, mappings), decision records, assurance cards, audit events, user identity (work email), and billing metadata.
3. Subprocessors
Listed on the Trust page. Changes notified per MSA.
4. Security
Technical measures include encrypted transit (TLS), role-based access, signed sessions, optional two-factor authentication, organization isolation, and audit logging. Details available under NDA.
5. Retention & deletion
Retention floors apply by subscription tier. Offboarding export packs and deletion requests follow the customer runbook and applicable law.
6. International transfers
Documented in the Order Form jurisdiction fields and org policy settings.