Data Processing Addendum.

Working draft for buyers evaluating a pilot. Have counsel review before a production contract.

Roles

The customer is the controller of its facilities data. Lisa Facilities is the processor, acting only on the customer’s documented instructions.

Processing

• Location: United States only, including backups and support access.
• Purpose: operating the Lisa platform for the customer — nothing else.
• Subprocessors: no unpublished subprocessors. The list is delivered before go-live and updated with notice.
• AI: no training of any model on customer data. The optional in-product assistant, when it ships, is off by default and enabled only by the customer’s written decision.

Security

Dedicated single-tenant instance, TLS in transit, AES-256 at rest, individual accounts with server-side roles, append-only audit log, logged break-glass support access. Crew location is captured only during an active shift session and deleted at sign-out.

Incidents

Breach notice to the customer’s named contact within 72 hours of confirmation, with what is known, what is affected, and what is being done.

Retention and exit

Retention follows the customer’s records policy; legal holds block deletion. On exit: full export in open formats, then certified deletion on a stated timeline.

Audit

Lisa answers the customer’s security questionnaire and provides the architecture, access-model, encryption, retention and subprocessor documents described on the security page.

Full DPA

Sent on request: mattlincoln@monalisamoving.com.