Legal
Data Processing Addendum
This addendum describes how AURUM processes personal data on behalf of clients acting as data controllers.
Last updated · January 2026
Roles
For personal data within your estate data, you act as the controller and AURUM acts as a processor, processing data only on your documented instructions.
Security measures
We maintain technical and organizational measures appropriate to the sensitivity of the data, including encryption, access control, and audit logging.
Sub-processors
We engage a limited set of vetted sub-processors under equivalent obligations. A current list is available to engaged clients on request.
International transfers
Where data is transferred across borders, we rely on appropriate safeguards and honor residency requirements you specify.