Data Processing Addendum (Apilyn)
Draft DPA for business customers using Apilyn as a processor.
Roles
For customer content submitted to the API, you are typically the controller and Apilyn acts as processor.
Account and billing data may be processed as controller data under the Privacy Policy.
Subprocessors
We use infrastructure providers (hosting, object storage, email) listed in the Subprocessors page.
We will provide notice of material subprocessor changes where required by law.
Security measures
Measures include encryption in transit, access controls, tenant isolation, and audit logging as described in security documentation.