Data Processing Addendum

Your firm is the Controller (or equivalent role under applicable law) for Customer Personal Data processed through Beech. Beech acts as Processor and processes data only to provide, secure, support, and improve the service under documented instructions.

Processing includes hosting, storage, organization, retrieval, and deletion of project operations data including tasks, drawings, files, chat, team and account metadata, billing records, and support communications.

Beech processes Customer Personal Data based on your use of product features, administrative settings, and support requests. If Beech cannot comply with an instruction due to law or technical limitations, Beech will notify the customer where legally permitted.

Beech ensures that personnel authorized to process Customer Personal Data are bound by confidentiality obligations.

Beech applies technical and organizational safeguards appropriate to risk, including transport encryption, role-based access controls, audit logging, optional MFA, malware-scanning controls for file uploads, and secret encryption where supported.

Beech may engage sub-processors to deliver service components. Current sub-processors are listed on the Subprocessors page.

Customer data may be processed outside India, including in jurisdictions where Beech providers operate. Beech applies contractual and operational safeguards appropriate to applicable law.

Beech provides tools and reasonable assistance to help customers respond to access, correction, export, and deletion requests, including firm-level export and deletion workflows available to Firm Admins.

If Beech confirms a personal data breach affecting customer data, Beech will notify impacted customers without undue delay and provide available information needed for customer obligations under applicable law.

Beech will provide reasonable information necessary to demonstrate compliance with this DPA, subject to confidentiality and security safeguards.

During the account term, Firm Admins can export data. On account deletion request, Beech applies a 7-day grace period before permanent deletion workflows run for storage and database records, subject to legal retention requirements.

DPA and privacy requests: [email protected]