Data processing addendum.
How Infochola Solutions acts as a data intermediary under PDPA when processing personal data on your instruction.
Roles
You are the organisation with control of the personal data. We process it on your documented instruction as a data intermediary, and for no other purpose.
Sub-processors
A current list is available on request, and we notify you before adding one. Each is bound to obligations no weaker than these.
Security measures
Database-per-tenant isolation, encryption at rest and in transit, an immutable audit log, and access limited to staff who need it for support you have requested.
Assistance
We help you answer access and correction requests, and support breach notification within the PDPC timeframe.
Deletion
On termination, your data is exported to you and then deleted on the schedule set in the agreement, including from backups on their own cycle.
This page is a demonstration of the site structure. The binding text is the version published at infoc.one. Last reviewed September 2026.