Fabvector Legal
Data Processing Addendum
The Fabvector DPA governs personal data handling, international transfers, and subprocessors supporting the manufacturing platform.
Controller and processor roles
- Customers act as data controllers; Fabvector operates as processor and sub-processor for qualified suppliers.
- We only process personal data required to deliver sourcing, quality, and logistics services.
- All processing instructions flow from the workspace owner and are tracked in the audit log.
International transfers
- Data residency locks all primary storage, caching, and AI workloads to Singapore, United States, or Mainland China.
- Standard Contractual Clauses and regional addenda apply for cross-border supplier collaboration.
- Fabvector maintains a published subprocessor list with notification windows for onboarding or removal.
Security and assistance
- Industry-standard encryption, logging, and incident response procedures outlined in the Security Policy.
- Customers may request audits, penetration test summaries, and vulnerability management reports annually.
- Fabvector assists with data subject requests and breach notifications within contractual SLAs.