# Data Processing Addendum (Template)

**Between:** MatrioshkaLabs Private Limited ("Processor")  
**And:** [Customer Legal Name] ("Controller")

## 1. Subject matter
Processor provides HushSafe content moderation and related Trust & Safety services to Controller via API and dashboard.

## 2. Duration
Term matches the underlying Master Services Agreement unless terminated earlier per DPA Section 9.

## 3. Nature and purpose of processing
- Automated classification of user-generated content
- Appeal workflow metadata
- Audit logs for transparency reporting

## 4. Types of personal data
User identifiers, message content, media metadata, moderation decisions, and appeal correspondence.

## 5. Categories of data subjects
End users of Controller's platform whose content is submitted for moderation.

## 6. Security measures
Encryption in transit (TLS 1.2+) and at rest, RBAC, annual penetration testing, incident notification within 72 hours.

## 7. Sub-processors
Controller authorizes listed sub-processors with 30 days notice of material changes.

## 8. Data subject requests
Processor assists Controller within reasonable timelines per applicable law (DPDP, GDPR).

## 9. Deletion and return
Upon termination, Processor deletes or returns personal data within 30 days unless legal retention applies.

**Contact:** privacy@matrioshkalabs.com · grievance@matrioshkalabs.com

— Template for enterprise execution. Legal review required.