Legal

Data Processing Agreement

Last updated: October 2026

When customers use Invoice Intelligence Platform to process invoices, we act as a processor on their behalf. This page summarises the terms of our standard DPA.

1. Roles

The customer is the controller of the invoice data it uploads; Invoice Intelligence Platform acts as processor and processes it only on documented instructions.

2. Processing details

  • Purpose: extraction, review, and export of invoice data.
  • Data: supplier and buyer details, invoice lines, bank details, user account data.
  • Duration: the term of the customer agreement plus the agreed deletion period.

3. Our commitments

  • Confidentiality of everyone authorised to process the data.
  • Technical and organisational security measures (see Security).
  • Prior authorisation for sub-processors, with the same obligations passed on.
  • Assistance with data subject requests, audits, and breach notifications without undue delay.
  • Deletion or return of data at the end of the services.

4. Request the signed DPA

To receive the full DPA for signature, email contact@nullbyte.ro.