Data Processing Addendum

Not an executed addendum

This product route is a placeholder for a Data Processing Addendum. It does not create processing terms, and it is not offered for execution. Counsel must review and approve the DPA before it can be offered.

It does not promise erasure, and it does not make a security or regulatory commitment.

Standard accounts are not end-to-end encrypted: the operator can read Standard-account Drive content. Private accounts encrypt Drive content on the Mac before upload; keys are unlocked by OPAQUE sign-in. You hold the keys on Private accounts and in the open core.

Account deletion is suspended. Crypto-shred of an account is designed, not live. A request does not revoke devices, shred keys, or delete rows.

Nothing here claims encryption at rest or encryption in transit. The status ledger is on the security page.

A code-derived processor list is published at sub-processors. That list is not an approved annex of an executed DPA.