Volume 11 Data Processing Addendum

Effective date: 19 January 2026

This Data Processing Addendum ("DPA") forms part of the Volume 11 master terms of service where Volume 11 processes personal data on behalf of a customer in connection with Volume 11 products and services.

1) Roles

The customer is the controller of customer personal data. Volume 11 acts as a processor when it processes that data to provide, maintain, secure, and support the services.

2) Processing Instructions

Volume 11 will process customer personal data only on documented instructions from the customer, including instructions in the agreement, product settings, support requests, and lawful use of the services.

3) Confidentiality and Security

Volume 11 will ensure personnel who access customer personal data are bound by confidentiality obligations and will maintain appropriate technical and organisational measures designed to protect personal data.

4) Sub-processors

Volume 11 may use sub-processors to provide hosting, communications, analytics, support, payment, and AI infrastructure. Volume 11 remains responsible for sub-processor performance where required by applicable data protection law.

5) Assistance

Taking into account the nature of processing, Volume 11 will provide reasonable assistance for data subject requests, security incidents, data protection impact assessments, and regulator consultations where required by law.

6) International Transfers

Where customer personal data is transferred internationally, Volume 11 will use an appropriate transfer mechanism required by applicable data protection law.

7) Deletion or Return

On termination of the services, Volume 11 will delete or return customer personal data in accordance with the agreement, product functionality, backup retention, and legal obligations.

8) Contact

For data processing questions or to request a signed copy of this DPA, contact info@volume11.ai.