Data processing addendum

Where a build touches client data, Sponte acts as a sub-processor under a clear DPA. The formal addendum is being finalized with counsel before launch.

The design intent is plain: your data lives in your environment under your controls. RLS tenant isolation, secrets in your own vault, and an append-only audit trail mean one client's data never bleeds into another's. The DPA documents that split of responsibility in full.

questions before this is published? reach us at hello@sponte.io.