Data processing addendum

Last updated 2026-10-21

This addendum applies when MERP processes personal data in your MERP workspace on your behalf.

Roles

You are the controller of personal data in your workspace. We are the processor and act only on your documented instructions, which are these terms, the product settings you choose and requests you make to support.

Our commitments

• Process workspace data only to provide the service.
• Make sure staff with access are bound by confidentiality.
• Keep appropriate technical and organizational security measures, described on the security page.
• Tell you without undue delay after we become aware of a personal data breach affecting your workspace.
• Help you respond to data subject requests.
• Delete or return workspace data at the end of the service, unless the law requires us to keep it.

Subprocessors

We use hosting, email and AI providers to run the service. We will keep a current list available on request and give notice before adding a new subprocessor.

Contact

To request a signed copy of this addendum, email [email protected].