MAINTARIUM LTD · VERSION 1.0 · 5 SEPTEMBER 2026
Data Processing Addendum
How Maintarium Ltd processes Customer Data for its business customers.
Roles and scope
For personal data that a customer enters into Maintarium Pro, the customer is normally the controller and Maintarium Ltd is the processor. We process that data only to provide, secure and support the service, on the customer's documented instructions and as required by law.
Security and subprocessors
We use tenant-scoped access controls, authenticated access, private storage and encryption in transit. Our current service providers include Supabase (authentication, database and storage), Microsoft Azure (application hosting), Stripe (payments) and OpenAI (AI-assisted features). We remain responsible for our subprocessors' processing of Customer Data.
AI-assisted features
AI assistance may be made available across application modules to generate reports, summaries and detailed overviews from relevant records. It is optional and advisory. A competent person must review every output before use. Customers must not use AI output as the sole basis for significant safety, employment, legal or compliance decisions.
End of service
On termination, the customer may request an available export. We will delete Customer Data from production systems within three months after contract end, subject to legal obligations, legal holds and isolated backup expiry.