Data Processing Agreement

Controller/processor terms for businesses using Finpliq to manage records containing personal data.

At a glance

• Customers remain responsible for the personal data they enter into Finpliq.
• Finpliq processes customer data to provide the service and support lawful accounting/compliance use cases.

Full policy

• The customer is generally controller of personal data placed into business records, while TA&T Ltd acts as processor for service delivery unless acting as controller for account, billing, security or legal compliance data.
• Processing includes hosting, storage, authentication, support, transaction processing, filing workflow preparation, audit logging and transactional communication.
• Subprocessors should be limited to the suppliers required to operate Finpliq, such as hosting/database infrastructure, email delivery, payment processing and HMRC API connectivity where applicable.
• Finpliq must assist customers with data subject requests where technically possible and legally required.