# Data Processing Addendum (DPA) — Template · SEA Fleet

**Parties:** Customer (Controller) ↔ VoxDuru / SEA Fleet (Processor)  
**Date:** ________ · **Version:** 2026-07-31

1. **Subject:** Processing of Customer Personal Data solely to provide SEA Fleet.
2. **Nature:** Hosting, auth, storage, sync, support.
3. **Duration:** Term of Pilot/Licence + retention policy.
4. **Types:** Account identifiers; crew/ops records Customer enters; inspection media.
5. **Security:** TLS; org RLS; access roles; subprocessors listed in Trust Center.
6. **Subprocessors:** Supabase; hosting for voxduru.com (Vercel); transactional email SMTP. Changes notified via Trust Center / email.
7. **Assistance:** Reasonable help with DSAR; breach notice without undue delay after confirmation.
8. **Deletion/return:** On written request after end of service, subject to legal holds / class retention obligations Customer configures.
9. **Audits:** Customer may review published Trust pack + request questionnaire answers (0₺ self-assessments). On-site audit = separate SoW.
10. **Liability:** As in master services / pilot SoW.

**Signatures:** Customer ________ VoxDuru ________