Data Processing Addendum

Your firm is the controller (or business) of client personal data; Linos LLC (which operates Linoscore Legal) is the processor (or service provider) and processes it only on your documented instructions.

Subject matter: provision of the practice-management service. Duration: the term of your subscription. Categories of data subjects: your clients, prospective clients, and opposing parties. Categories of data: contact details, matter information, documents, and billing records.

We implement appropriate technical and organizational measures (encryption in transit and at rest, role-based access control, tenant isolation, and audit logging).

We use the following subprocessors, each under equivalent data-protection terms: DigitalOcean, LLC — Application hosting, managed database & storage (United States (New York)); Anthropic, PBC — AI features (Claude) — zero data retention, no model training (United States); OpenAI, L.L.C. — Text embeddings for search — no model training on API content (United States). Our AI subprocessors do not retain your prompts to train shared models. We will give you advance notice before adding or replacing a subprocessor, and you may object on reasonable data-protection grounds.

We assist you in responding to data-subject requests and provide export/erasure tooling in-app.

We notify you of a personal-data breach affecting your data without undue delay, and in any event within 72 hours of confirming the incident, with the information reasonably available to you at that time.

Where data is transferred across borders, we rely on appropriate safeguards (e.g. Standard Contractual Clauses). On termination we return or delete personal data as instructed, and in any case delete or de-identify it within 60 days of the end of your subscription, except where retention is required by law.