Data Processing Addendum

This summarizes the data-processing terms between you (the “Controller”) and Ensight.ai (the “Processor”). To execute a counter-signed DPA for your records, email privacy@llmspendguard.com.

Roles & scope

You are the controller of the data you send; we process it solely to provide the service. Because the client scrubs at the source, the data we process is aggregate and de-identified by design — per-day spend roll-ups, scrubbed insight abstracts, and identity/billing metadata from Clerk/Stripe. We do not process raw prompts, outputs, or API keys.

Nature & duration

Processing consists of storing, aggregating, indexing (including embedding scrubbed abstracts for search), and displaying your data, for as long as you maintain an account, subject to the retention terms in the Privacy Policy.

Subprocessors

We engage the subprocessors listed at /subprocessors. We'll give notice of changes and remain responsible for their compliance.

Security measures

• Encryption in transit (TLS) and at rest.
• Tenant isolation via Postgres row-level security (a query cannot cross organizations).
• Hashed ingest keys; verified webhook signatures; least-privilege app DB role.
• An ingest denylist that rejects prompt/key/PII payloads.

Data-subject requests, deletion & breach

We assist you in responding to access/erasure requests. You can export or permanently purge your organization's data at any time (dashboard or privacy@llmspendguard.com); deletion cascades across all tables. We notify you without undue delay of any personal-data breach affecting your data.

International transfers

Where data is transferred internationally, we rely on appropriate safeguards (e.g., Standard Contractual Clauses) with our subprocessors. [Confirm transfer mechanisms with counsel before launch.]

Audit

On reasonable request we provide information necessary to demonstrate compliance with this DPA.