Data Processing Addendum

For personal data contained in materials you submit, you are the controller and groundre is the processor. groundre processes such data only on your documented instructions.

• Encryption in transit and at rest.
• Isolation boundary between analysis and the control plane; least-privilege access.
• Audit logging of verdict and job activity.

groundre uses a limited set of sub-processors listed on the Sub-processors page. We notify customers before adding a new one and give you the opportunity to object.

Where data leaves its region, transfers rely on Standard Contractual Clauses or an equivalent lawful mechanism.