Data Processing Addendum

In final legal review — see status below

Why this exists

If you are an accounting or tax firm, the FTC Safeguards Rule (16 CFR 314.4(f)(2)) requires you to obtain written security commitments from the service providers that handle your clients' information. This addendum is that document for Delegait.

You do not need to negotiate or sign it separately. It is incorporated by reference into our Terms of Service and applies automatically to every firm using the platform, from the moment you open your account. If your own counsel requires a countersigned copy, we will provide one.

What it will cover

• Roles. Your firm is the controller of your clients' information. Delegait is your processor and acts only on your instructions.
• Purpose limitation. We process your data to provide the service, and not for our own purposes. We do not sell it.
• Subprocessors. A published list, kept current, with notice before it changes. See Subprocessors.
• Security. The technical and organisational measures we maintain, including encryption in transit and at rest, field-level encryption of taxpayer identification numbers, access controls, and audit logging.
• Incident notification. How and how quickly we tell you if something happens.
• Return and deletion. What happens to your data when you leave.
• Assistance. Help responding to your own clients' access and deletion requests.

What this is not

This addendum governs the relationship between your firm and Delegait. It is not the consent your clients give you under IRC §7216 to disclose or use their tax return information — that is between you and each taxpayer, and it must be signed by them. The platform provides the mechanism to collect and store those consents; Delegait is not a party to them.

Contact

info@delegait.biz