Data Processing Addendum
How Rybion processes personal data when acting as a processor for organizational customers.
Last updated August 8, 2026
Scope
This addendum applies when an organization (“Customer”) uses Rybion under a paid or enterprise arrangement and Rybion processes personal data on the Customer’s behalf.
For consumer accounts on the public product, the Privacy Policy governs instead.
Roles
Customer is the controller (or equivalent). Rybion is the processor and will process personal data only to provide the contracted services and under Customer instructions.
Security & subprocessors
Rybion maintains appropriate technical and organizational measures and will notify Customer of personal-data breaches without undue delay as required by applicable law.
A current list of subprocessors is available on request at privacy@rybion.ai.