Legal
Data Processing Addendum.
Summary of the DPA available to EFUPAL QSOL-VS customers. A countersigned copy is provided on request for paid plans.
Last updated: August 3, 2026
01Roles
For customer account and usage data submitted to the service, the customer acts as controller and EFUPAL LLC acts as processor, processing only on the customer's documented instructions.
02Scope of processing
Processing is limited to operating QSOL-VS: authentication, entropy request accounting, validation scan execution, policy storage, billing, audit evidence, and support.
03Subprocessors
EFUPAL engages subprocessors for hosting, database, payment processing, and workflow automation. A current list is available on request, and we provide notice of material changes.
04Security measures
Row-level security for tenant isolation, encryption in transit, server-side-only administrative credentials, least-privilege access for staff, and append-only audit logging with chain verification.
05International transfers
Where personal data is transferred out of the EEA, UK, or Switzerland, EFUPAL relies on Standard Contractual Clauses or another lawful transfer mechanism as set out in the DPA.
06Data subject requests and deletion
EFUPAL assists the customer in responding to data subject requests and, on termination, deletes or returns customer personal data within the period stated in the DPA, subject to legal retention duties.
07Requesting a signed copy
Email legal@efupal.ai with your organization name and slug to receive the executable DPA.
1001 S. Main St. #7973, Kalispell, MT 59901, United States.
legal@efupal.ai