Data Processing Addendum

# FoodX Data Processing Addendum — internal working draft

Use where FoodX processes personal data for a business customer. The final DPA must identify controller and processor roles, documented instructions, data categories, data-subject categories, confidentiality, security measures, subprocessors, assistance with rights and incidents, international transfers, deletion/return, audits, and any required UK/EU/US addenda.

Do not claim a transfer mechanism, certification, security standard, or subprocessor arrangement until it is in place. Attach a current processing schedule and subprocessor list before signature.