Data Processing Agreement

The data processing agreement covering the engineering data processed through SchematicForge, with a downloadable PDF copy.

Last updated: 2026-09-10

Parties and roles

This Data Processing Agreement is between the customer (the controller) and the operator of SchematicForge (the processor), and forms part of the Terms of Service. The controller determines the purposes and means of processing; the processor processes personal data on documented instructions from the controller. Contact: schematicforge@gmail.com.

Categories of data and data subjects

The processing may involve engineering documentation data contained in uploaded IO lists and project files, which may include names, contact details, and technical data relating to data subjects such as the controller's employees and contractors.

Purposes of processing

The processor processes data solely to provide the SchematicForge service: parsing uploads, running assignments, generating registers, schedules, and drawings, storing projects, and supporting account administration.

Processor obligations

The processor: processes data only on documented instructions; ensures personnel with access are bound by confidentiality; implements appropriate technical and organisational measures; assists the controller in meeting its data-subject rights obligations; and notifies the controller of personal data breaches without undue delay.

Sub-processors

The controller provides general authorisation for the sub-processors listed at /sub-processors. The processor will notify the controller of any new sub-processor before first use, and the controller may object within a reasonable period.

Security

The processor maintains encryption in transit and at rest, access controls, and an audit log, as described on the /security page.

Data subject rights

The processor assists the controller in responding to data subject requests relating to access, rectification, erasure, restriction, portability, and objection, to the extent required by applicable law.

Deletion on termination

On termination of the service, the processor deletes or returns the controller's data within a reasonable period, except where the processor is required to retain it by law.

Duration

This agreement applies for as long as the processor processes data on behalf of the controller under the Terms of Service.

Contact

Notices under this agreement: schematicforge@gmail.com.