Data Processing Addendum.

1. Scope and roles

This addendum applies when Orion Transportation processes personal data on behalf of the customer while providing OrionOS. The executed version must identify the parties, applicable law, controller/business and processor/service-provider roles, order form, term, and any negotiated instructions.

2. Processing schedule

The executed schedule must identify subject matter, duration, nature and purpose, data-subject categories, personal-data categories, sensitive-data restrictions, retention instructions, and approved business purposes. Customers must not submit prohibited data that is outside the executed scope.

3. Processing obligations

Orion Transportation will process scoped data on documented customer instructions; bind authorized personnel to confidentiality; apply appropriate technical and organizational measures; support reasonable data-subject, security, deletion, and audit requests; notify the customer of a confirmed personal-data incident as required by the executed terms; and delete or return scoped data at the end of services subject to law and agreed retention.

4. Security measures

The applicable exhibit should cover tenant and role authorization, server-side secret storage, encryption in transit, logging and evidence boundaries, release controls, vulnerability and incident handling, recovery controls, workforce access, and provider management. Controls must be validated against the current Security Overview and customer configuration.

5. Subprocessors and transfers

The executed addendum must define general or specific authorization, notification and objection procedure, flow-down obligations, and any required transfer mechanism. Review the current subprocessor disclosure and data-residency boundary before signature.

6. Audit and precedence

Audit scope, frequency, confidentiality, cost, independent reports, remediation, liability, and document precedence must be stated in the signed agreement. This public template does not amend the OrionOS SaaS Agreement.