Scope: processing is limited to fingerprinting and automated analysis at the customer's instruction. Documents are not retained after processing completes.
Sub processors: hosting provider and RFC 3161 timestamp authorities (fingerprint only). A current list is available on request.
Security: encryption in transit, hashed credentials, key material stored hashed, least privilege access.
Breach notification within 72 hours of awareness. Audit summaries available on request for Enterprise.
To execute a signed DPA, contact contact@ludehq.com.