Data Processing Addendum

The customer is the controller of personal data uploaded to the platform (e.g. names of engineers, contact details in vendor records). Reliabilytics is the processor and processes such data only on the customer's documented instructions, as needed to provide the service.

• Subject matter: provision of the Reliabilytics maintenance-management platform.
• Duration: the subscription term plus the wind-down period.
• Nature and purpose: hosting, processing and display of maintenance records; AI processing of documents the customer submits.
• Data subjects: the customer's personnel, contractors and vendor contacts.
• Categories of data: business contact details, work assignments, activity records. The platform is not designed for special-category data.

We: process only on instructions; ensure personnel are bound by confidentiality; implement appropriate technical and organisational measures (see Security); assist with data-subject requests and breach notifications without undue delay; and on termination delete or return personal data at the customer's choice.

We use vetted sub-processors for cloud hosting, email delivery, AI model inference and scheduling. A current list is available on request. We remain liable for sub-processors and will give notice of changes, allowing the customer to object on reasonable grounds.

Transfers outside the UK/EEA are made under adequacy regulations or standard contractual clauses.

Customers requiring a countersigned DPA (including the full sub-processor list and SCC annexes) can request one at hello@reliabilytics.com.