L-003
Data processing addendum
Effective August 18, 2026. Processor terms for personal data handled in Drawing Logic HQ on behalf of a customer organization.
Roles
The customer organization is the controller of personal data in its workspace (member names, emails, and any personal data appearing on uploaded drawings or forms). Ascendra Technologies is the processor.
This addendum applies when you use the service in a way that processes personal data subject to applicable privacy law, including GDPR where it applies.
Instructions
We process personal data only to provide the service, on documented instructions from the customer, and as required by law.
Subject matter: account administration, drawing storage, takeoff, field forms, and related support. Duration: the subscription plus backup retention. Nature: hosting, display, and processing inside the workspace.
Personnel and subprocessors
Personnel with access are bound by confidentiality. Subprocessors currently include infrastructure, database/auth, object storage, and payment processors named on the Security page.
We will remain responsible for subprocessors we appoint and will impose data-protection obligations no less protective than these.
Security and incidents
We implement technical and organizational measures described on the Security page, including access control, AES-256 encryption at rest (databases, backups, logs, and non-production), TLS 1.2 minimum in transit, private object storage, and organization isolation.
We will notify the customer without undue delay after becoming aware of a personal-data breach affecting their workspace.
Assistance and return
We will assist with data-subject requests that must be handled by the controller, to the extent the workspace tools do not already allow the customer to act.
On termination, the customer may export project files then available in the product. Remaining copies are deleted or anonymized within a commercially reasonable period except where law requires retention.