Data processing agreement

For Business and Enterprise customers, LudeHQ acts as processor for the personal data contained in submitted documents during in memory analysis.

Scope: processing is limited to fingerprinting and automated analysis at the customer's instruction. Documents are not retained after processing completes.

Sub processors: hosting provider and RFC 3161 timestamp authorities (fingerprint only). A current list is available on request.

Security: encryption in transit, hashed credentials, key material stored hashed, least privilege access.

Breach notification within 72 hours of awareness. Audit summaries available on request for Enterprise.

To execute a signed DPA, contact [email protected].

Last updated 7 July 2026