Data Processing Addendum

Terms that apply where TruHub Solutions processes personal data on your behalf.

Last updated 2 August 2026 · TruHub Solutions

1. Roles

You are the controller of personal data you submit to your workspace. TruHub Solutions acts as processor and processes that data only on your documented instructions, which include operating the service as described in the Terms.

2. Subject matter and duration

Subject matter: provision of the TruHub Origin registry, certificate issuance and public verification. Duration: for as long as your workspace is active, plus any retention period required for the evidentiary integrity of issued certificates.

3. Categories of data and data subjects

Data subjects: your personnel and the parties named on registered records. Categories: identification and contact details, workspace role, declared ownership details, and audit metadata.

4. Security measures

Encryption in transit, role-based access control, row-level security policies scoped to workspace membership, append-only audit logging, least-privilege administrative access and regular backups.

5. Sub-processors

We engage the sub-processors listed on the Sub-processors page. We will give notice before adding a new sub-processor so you can object on reasonable data-protection grounds.

6. Assistance and breach notification

We assist with data subject requests, impact assessments and audits on reasonable request, and notify you without undue delay after becoming aware of a personal data breach affecting your workspace.

7. Deletion and return

On termination we delete or return personal data within 90 days, except where the record forms part of an issued certificate whose integrity must be preserved, or where retention is legally required.

8. Requesting a signed copy

Email truhubsolutions16@gmail.com to request a countersigned copy of this addendum.