Data Processing Addendum

Our commitments when processing personal data on behalf of clients.

Last updated: September 1, 2026

01Roles

When delivering services, Largis acts as a data processor and the client acts as the data controller. We process personal data only on documented client instructions.

02Security measures

We maintain technical and organizational measures including tenant isolation via row level security, encryption in transit and at rest, access logging, and least-privilege access.

03Sub-processors

Infrastructure sub-processors include Vercel (hosting), Cloudflare (edge security and DNS), and Supabase (database). Clients are notified of material changes.

04Breach notification

We notify affected clients without undue delay, and in any event within 72 hours, of becoming aware of a personal data breach.

05Execution

A countersigned DPA is available on request. Questions can be directed to sagar@largis.co or by post to Largis Venture Private Limited, Unit 101, Oxford Towers, HAL Old Airport Rd, Bangalore – 560008, India.