LEGAL FOUNDATION
Data Processing Policy
This placeholder describes the intended multi-tenant processing model and should become a formal Data Processing Agreement before enterprise launch.
Foundation draft — July 2026Controller and processor roles
Customers control the business data they upload; BOT processes it to provide contracted services.
Sub-processors
A maintained list should identify hosting, database, email, payment, analytics and AI providers.
Security measures
Workspace isolation, encryption in transit, access controls, audit logs and backups form the planned baseline.
Deletion and return
Data export and deletion procedures will be defined by plan and contract.