B2B Data Processing Addendum (DPA)

SponsorLink.au · ABN 86 328 655 832

Effective Date: August 13, 2026 · Updated: 9 October 2026

1. Tenant Isolation & Security

Every request is checked in SponsorLink's application code so that a club, business or member can only reach their own records, and automated cross-account tests check this before every release. Payout bank details are encrypted at rest (AES-256-GCM). Error messages shown to users are generic; full error details are kept only in private logs.

2. Sub-Processors & Breach Notification

Sub-processors include Google Cloud Platform (GCP), Cloudflare, Stripe, and SendGrid/Twilio. In the event of a security incident, SponsorLink will notify affected controllers within 72 hours.

3. Legal Contact

For DPA inquiries, contact [email protected].