Data Processing Agreement

Roles

For customer-uploaded invoice and supplier data, the customer is typically the data controller and Invogi acts as data processor.

Customer instructions

Invogi processes customer personal data only to provide and secure the service, according to the customer's documented instructions in the agreement, product configuration, and authorized support requests, unless applicable law requires otherwise.

Security and confidentiality

Invogi limits access to authorized personnel and subprocessors subject to confidentiality obligations and maintains technical and organizational safeguards described on our Security & Trust page.

Sub-processors

The customer gives general written authorization for Invogi to use the providers in our authoritative Subprocessor List. That register names each provider, its purpose, processing scope and location, whether its use is conditional, and its own current legal resources. It also explains advance notice, objection, and affected-service termination rights for changes. Paddle is separately disclosed there as merchant of record and an independent recipient/controller, not as an invoice-data subprocessor.

Processing details

Processing lasts for the customer relationship and the applicable retention or deletion period. Its nature and purpose are receiving, storing, validating, extracting, comparing, securing, and returning customer data to provide Invogi's invoice-control service. Personal data may include user and business contact details, supplier and buyer identifiers, invoice and payment data, bank-account information, connected-system data, and audit or security metadata. Data subjects may include customer users and personnel, suppliers, payees, buyers, and their representatives or contacts.

Data subject requests

Erasure requests are handled per our retention policy: personal data in append-only audit/finding evidence is pseudonymized in place; source documents are hard-deleted. Contact us to initiate a request.

Incidents, audits, and deletion

Invogi will notify affected customers without undue delay after confirming a personal-data breach, provide information reasonably needed for compliance, and make relevant security information available on reasonable request. At the end of service, customer data is returned or deleted according to the agreement and configured retention, except where law requires continued storage.

International transfers

Where a restricted international transfer occurs, the parties will use an applicable lawful transfer mechanism, including standard contractual clauses where appropriate. Contact support to request a signed DPA or current transfer details.