Data Processing Addendum

Scope and roles

This addendum forms part of the Terms of Service where a customer’s use of the suite involves the processing of personal data. The customer is the controller; Prompt Gateway, Inc. is the processor. It is countersigned on request — ask through the contact-sales form.

Nature and purpose of processing

Prompt content is processed in volatile memory for the sole purpose of returning the requested result, and is discarded on completion. No prompt content is written to durable storage at any point, which materially narrows the subject matter of this addendum: there is no stored dataset of customer content to access, export, or erase.

Persisted processing is limited to account, billing, team, and policy metadata, plus support correspondence the customer’s users choose to send.

Security measures

• TLS 1.3 on every network hop, with mutual TLS between internal services
• payloads held in memory only and released on request completion
• logs, traces, and metrics restricted to an allow-list of identifiers, status codes, and counts — never payload content
• envelope encryption with customer-scoped keys where Prompt Guard is enabled
• least-privilege service accounts and credentials held in a managed secret store

Subprocessing

The customer authorises the subprocessors listed at /legal/subprocessors. We give notice before adding a subprocessor and the customer may object on reasonable data-protection grounds.

International transfers and residency

Where personal data is transferred outside its region of origin, the transfer is made under the Standard Contractual Clauses or another lawful mechanism. Custom data residency is available on the Enterprise plan and, where agreed, is recorded in the order form.

Assistance, breach notification, and deletion

We assist the controller with data-subject requests and impact assessments, notify the controller without undue delay on becoming aware of a personal-data breach, and delete or return persisted personal data on termination. Prompt content requires no deletion step because it is never stored.

Audit

We make available the information necessary to demonstrate compliance with this addendum and permit audits on reasonable notice, subject to confidentiality.