Client Data Processing Agreement (DPA)

1. Roles and Scope For all personal and commercial data entered into a tenant portal, the tenant acts as the Data Controller, and Ruhanir IT acts as the Data Processor. We process data strictly in accordance with tenant instructions and agreed service agreements.

2. Technical Safeguards Ruhanir IT maintains organizational and technical measures: - Encryption in transit via TLS 1.3 - Authenticated tenant-scoped database queries - Administrative audit logs for critical database modifications

3. Sub-processors We only engage verified infrastructure sub-processors that meet strict data protection and reliability standards.