Data Processing Addendum (DPA) - Public Summary

Effective Date: February 19, 2026

Last Updated: February 19, 2026

1. Processing Role

For extension runtime payroll operations, processing is local to the user's environment. For licensing and checkout records, DocSmith acts as service provider/controller for transaction and entitlement operations.

2. Covered Service Surface

• Website and documentation: docsmith.tools
• Checkout and payment workflow: buy.docsmith.tools
• Licensing and activation APIs: licensing.docsmith.tools
• DocSmith browser extension runtime in supported Chromium browsers

3. Data Scope

• Payroll payloads are not uploaded by default extension workflows.
• Licensing and purchase systems process only minimum entitlement/transaction data.
• Operational records are retained only as needed for service integrity and legal obligations.

4. Subprocessor and Infrastructure Categories

• Application hosting and edge delivery infrastructure.
• Payment and checkout processing infrastructure.
• Managed deployment/runtime infrastructure.

5. Security and Incident Response

DocSmith maintains administrative and technical controls appropriate to service scope, with incident handling procedures applied where required by law and contractual obligations.

6. Contact

For DPA or vendor review requests, contact Support Center.