Data Processing Addendum (Institutions)

This DPA applies when an institution (“Controller”) uses MyDrugIndex as a Processor for staff accounts and usage analytics.

Scope

Processing of staff identity, seat assignments, and service logs for the duration of the institutional subscription.

Security

Access controls, encrypted transport (HTTPS), hashed passwords, and audit logging of administrative actions.

Sub-processors

Hosting provider, SMS gateway, payment gateway. List available on request.

Contact

dpo@mydrugindex.local for institutional privacy inquiries.