Data Processing Addendum

You are the data controller; Snaply is the processor for capture and device data handled through the SDK, console and webhooks. This addendum applies to all plans, free included.

AWS (Frankfurt — storage & compute), Stripe (billing), Postmark (transactional email). We give 30 days’ notice before adding or changing sub-processors.

Encryption at rest and in transit, per-workspace isolation, least-privilege access with audit logging, annual penetration testing. SOC 2 Type II in progress.

On termination we delete customer data within 30 days. The consent log can be exported at any time as audit evidence.