← Back to home

Data Processing Addendum

DPA · Last updated: 29 Jul 2026

This Data Processing Addendum ("DPA") forms part of the Master Subscription Agreement between you ("Controller") and Solviq Technologies Pvt Ltd ("Processor") and applies to the processing of Personal Data under India's Digital Personal Data Protection Act, 2023 ("DPDP").

1. Definitions

"Personal Data" means any data about an identified or identifiable natural person. "Processing" has the meaning given in DPDP Act.

2. Roles

  • You are the Data Fiduciary for your end-customers and employees.
  • Solviq is the Data Processor, processing Personal Data only on your documented instructions.

3. Processing Subject Matter & Duration

Solviq processes Personal Data to provide the ERP service, for the duration of your subscription and any post-termination grace period (90 days).

4. Types of Personal Data

  • Customer/vendor contact data (name, phone, email, GSTIN, PAN)
  • Employee data (name, Aadhaar, PAN, bank, UAN, ESI)
  • User account data (email, hashed password, login IPs)

5. Sub-processors

List at /legal/subprocessors. Solviq will notify you 30 days before adding new sub-processors. You may object on reasonable grounds.

6. Security Measures

  • Encryption at rest (AES-256) and in transit (TLS 1.3)
  • Multi-tenant isolation via row-level tenant_id
  • Daily encrypted backups, retained 30 days
  • SOC 2 Type II controls, annual penetration tests
  • Role-based access, audit logging, 2FA available

7. Breach Notification

Solviq will notify you within 72 hours of becoming aware of a Personal Data breach.

8. Data Subject Rights

Solviq will assist you in fulfilling Data Principal rights under DPDP (access, correction, erasure, grievance) via technical measures.

9. Cross-border Transfers

Personal Data remains in India by default. Cross-border transfers (if enabled by you) follow DPDP restrictions.

10. Return / Deletion

On termination, Personal Data is deleted within 90 days, or returned in standard formats on request.

11. Audit Rights

You may audit Solviq once per year with 30 days' notice. Solviq's SOC 2 report is available under NDA.

12. Liability

Cap on liability is as per the Master Subscription Agreement.