Data Processing Agreement

1. Parties

• Data Controller: You (the lender)
• Data Processor: Quantium Technologies

2. Purpose of Processing

• Providing LoanFlow dashboard services
• Syncing data between Encompass and HubSpot as instructed by you
• No processing beyond what is necessary to provide the service

3. Data Categories Processed

• Loan officer names and contact info
• Loan pipeline data from Encompass
• HubSpot deal and contact data
• Company and account information

4. Security Measures

• Fernet encryption for credentials
• Tenant data isolation
• Access controls and audit logging
• HTTPS encryption in transit
• Regular security reviews

5. Subprocessors

• Railway (hosting) — USA
• Anthropic (AI) — USA
• HubSpot Inc. (API) — USA / EU
• ICE Mortgage Technology (API) — USA

6. Data Subject Rights

We support your obligations to:

• Provide data access to subjects
• Correct inaccurate data
• Delete data on request
• Export data portability

Contact: info@quantiumtechnologies.com

7. Data Breach Notification

• We notify you within 72 hours of discovering any data breach
• Notification via registered email

8. Data Deletion

• All data deleted within 30 days of contract termination
• Confirmation provided by email

9. Audit Rights

• You may request security audit documentation at any time
• Email: info@quantiumtechnologies.com