Data Processing Addendum

Last Updated: September 2026

This Data Processing Addendum (“DPA”) describes how TraceForge processes personal data on behalf of users.

1. Roles

• User: Data Controller
• TraceForge: Data Processor

2. Processing Activities

TraceForge processes data to:

• Store evidence
• Generate intelligence analysis
• Produce PDF reports
• Provide account services

3. Subprocessors

• Supabase (storage, authentication)
• Stripe (billing)

4. Security Measures

TraceForge implements:

• Encryption in transit
• Secure storage
• Access controls
• Audit logs (Pro)

5. Data Subject Rights

Users may delete evidence, export data, or request account deletion at any time.

6. Contact

privacy@tracedragon.com