Data Processing Addendum

Last updated: June 1, 2026

1. Introduction

This Data Processing Addendum ("DPA") forms part of the Terms of Service between Aerezo Technologies Inc. ("Processor") and the customer ("Controller"). It sets out the terms for processing personal data in compliance with applicable data protection laws, including GDPR and CCPA.

2. Data We Process

We process employee personal data on behalf of our customers, including names, addresses, Social Security numbers, bank account details, tax information, and benefits enrollment data. We do not process this data for our own purposes.

3. Subprocessors

We use approved subprocessors for hosting (AWS), email delivery, and analytics. A current list is available in our Trust Center and we notify customers of any changes.

4. Security Measures

We implement encryption, access controls, regular audits, and staff training. Full details are available in our SOC 2 Type II report.

5. Contact

For DPA questions, contact privacy@aerezo.com.