Legal

Data processing agreement

A summary of how Cashier processes personal data on your behalf. Business and Team customers can request the signed agreement.

Last updated: [date]Draft for legal review

1. Roles

You are the controller of the personal data in your workspace. Cashier is the processor.

We process personal data only to provide the service and as you instruct through your settings.

Listed on our Security page. We give 30 days notice before adding one.

Encryption at rest and in transit, access controls, logging and staff training.

Data stays in the region you choose. Where a transfer is needed, we use standard contractual clauses.

We notify you without undue delay and within 72 hours of becoming aware of a breach.

Email [email protected] from your workspace owner address.