AXIUMN

Data Processing Addendum

Last updated: June 2026
Template for review. This document has not yet been reviewed by legal counsel; review and adapt it to your jurisdiction before relying on it.

This Data Processing Addendum ("DPA") forms part of the agreement between the customer ("Controller") and AXIUMN ("Processor") for the processing of personal data under applicable data-protection law, including the GDPR. Where AXIUMN determines the means and purposes of processing (e.g. building its contact dataset), AXIUMN acts as an independent controller.

1. Roles and scope

AXIUMN processes personal data on the Controller's behalf only to provide the service and per the Controller's documented instructions (these Terms and in-product configuration).

2. Subject matter and duration

Processing lasts for the term of the agreement. The subject matter is the provision of hiring-manager identification, enrichment, and outreach-support features.

3. Nature and purpose; categories of data and data subjects

  • Data subjects:the Controller's account users; business contacts (likely hiring managers) identified from public job postings.
  • Categories: name, business title and employer, work email, work phone, public professional-profile URL, and related business context.

4. Sub-processors

The Controller authorises AXIUMN to engage the sub-processors listed in our Privacy Policy (Supabase, Apollo.io, People Data Labs, Apify, OpenRouter, Firecrawl, Vercel). We will inform the Controller of material changes and remain responsible for our sub-processors' compliance.

5. Security

We maintain appropriate technical and organisational measures, including encryption in transit, access controls, role-based authorisation, and row-level security on tenant data.

6. Data subject requests

We assist the Controller in responding to data-subject requests. AXIUMN provides in-product tooling to erase a person's data (with suppression against re-collection) and to export the data held about a person.

7. International transfers

Where data is transferred internationally, appropriate safeguards (e.g. Standard Contractual Clauses) apply.

8. Deletion

On termination, AXIUMN will delete or return Controller personal data, subject to legal retention requirements.

9. Audits

AXIUMN will make available information necessary to demonstrate compliance with this DPA on reasonable request.

To execute this DPA, contact [legal@your-domain].

PrivacyTermsDPAAcceptable Use