# Data processing addendum

Terms for personal data we process on your behalf. Draft pending legal review.

Updated 2026-11-12

> Draft. Lawyer review is required before this page is relied on.

Draft. This is an outline for counsel, not an agreement.

## Roles

You are the controller of personal data in your memory content. kaibo is the processor.

## To be written with counsel

- Subject matter, duration, nature and purpose of processing
- Instructions and confidentiality
- Security measures (see the security page)
- Subprocessors and notice of changes (see the subprocessors page)
- Assistance with data subject requests (export and forget through the API)
- Breach notification timing
- Deletion or return at the end of the service
- Audit rights
- International transfers
