# SAMPLE Data Processing Addendum (staging test document)

**This is a sample document for testing Clausewerk on staging. It is not a gotomyerp agreement and has no legal effect.**

## Scope {#sec-scope}

This sample addendum applies when the Provider processes personal information on behalf of the Client while delivering the Services.

## Processing instructions {#sec-instructions}

The Provider processes personal information only on the Client's documented instructions, which include this addendum and the Agreement.

## Security {#sec-security}

The Provider keeps appropriate technical and organisational measures to protect personal information against unauthorised access, loss or disclosure.

### Breach notification {#sec-breach-notification}

The Provider notifies the Client without undue delay, and in any case within 72 hours, after becoming aware of a breach of security safeguards involving the Client's personal information.

## Subprocessors {#sec-subprocessors}

The Provider may use subprocessors listed on its website. It gives the Client 30 days' notice before adding a new subprocessor.

## Deletion and return {#sec-deletion}

When the Services end, the Provider deletes or returns the Client's personal information within 90 days, unless the law requires it to keep a copy.