Data Processing Addendum (DPA)

Effective Date: December 1, 2025

This DPA supplements the Terms of Service.

1. Scope

AuthLN processes data solely on documented customer instructions.

2. Retention & Deletion

All personal data is deleted within 45 days of termination.

3. Security Controls

Aligned with NIST SP 800-53 Rev. 5 and ISO/IEC 27001:2022.