Skip to content
Get access

Legal

Data Processing Addendum

Effective 2026-09-19 · entity: Ledgerbook AI · pre-launch notice — the executable DPA publishes before any personal data is processed under a commercial agreement (change log below).

What this page is

This is the processor-terms record for ledgerbook.ai and the Ledgerbook AI ledger product. While the site is pre-launch and the waitlist runs on a mailto: form, correspondence is held in ordinary email under the privacy notice and no customer data is processed on our infrastructure. The executable addendum — controller and processor roles, the sub-processor list, the security measures annex and the international-transfer mechanism — is provided to any customer before commercial launch, and is available on request at privacy@ledgerbook.ai.

Roles

For ledger contents, the customer is the controller and Ledgerbook AI is the processor (or sub-processor where the customer is itself a processor). In the self-hosted and air-gap deployment classes, ledger contents never reach Ledgerbook infrastructure — the software runs in the customer's own environment, so the processing relationship for ledger data is exercised by the customer's own operations. Waitlist and correspondence data is handled as described in the privacy notice.

Sub-processors

The launch build uses no data sub-processors beyond ordinary hosting and email. The processor and sub-processor list, with locations and purposes, publishes with the commercial launch; customers will be notified of changes ahead of them taking effect.

Security measures

Technical and organisational measures are described on the security page, which is written to be lifted into a security questionnaire — including what is not yet in place. Nothing on that page should be read as a certification, and no attestation is claimed until it is issued (NFR-15).

Data subject requests

Requests from data subjects are answered through privacy@ledgerbook.ai. For self-hosted deployments the customer, as controller, answers directly — we assist where the request concerns the software itself. Access, correction and deletion requests about waitlist correspondence are handled as described in the privacy notice.

Change log

  • 2026-09-19 — first publication (pre-launch record; executable DPA and sub-processor list pending commercial launch).