Data processing addendum

This DPA forms part of the Terms of Service between you and Ounie. It applies when we process personal data on your behalf.

Subject matter

We process the public web page you ask us to audit, the brand and topic you submit, and the answers returned by public AI models, at your direction. Where those inputs or answers contain personal data, you are the data controller; we are a data processor acting on your documented instructions.

Subprocessors

• Stripe — payment processing (via ounie.com)
• Neon — application database
• Amazon Web Services (S3, us-east-1) — encrypted storage of exported reports
• Vercel — application hosting
• OpenRouter — access to the AI model panel (GPT-4o, Gemini, Claude)

Data security

Data at rest is encrypted with AES-256 (SSE-S3 for S3 objects; Neon's encrypted volumes for Postgres). Data in transit uses TLS 1.2+. Access to production data is limited to operations engineers under role-based controls and logged in our audit trail.

Contact

For DPA requests, open a DPA ticket. Routed to ounie@ounie.com.