Data Processing Addendum
Last updated: June 17, 2026 · Version 0.1 (DRAFT) · Available on request
01. Overview
This Data Processing Addendum (“DPA”) supplements the Terms & Conditions and governs AirOne’s processing of personal data on your behalf. It is aligned with the processor (Data Processor) duties under the Digital Personal Data Protection Act 2023 and, where applicable, Article 28 of the GDPR.
02. Roles & Instructions
You are the controller (Data Fiduciary) of the personal data you put into the Services; AirOne is the processor and processes that data only on your documented instructions, including for the purpose of providing the Services, and keeps it confidential.
03. Security Measures (TOMs)
The Technical & Organizational Measures annex maps each measure to an implemented control:
- Encryption in transit (TLS 1.2+/1.3) and at rest (AWS KMS).
- Least-privilege access control (AWS IAM + database-level role & privilege controls) and tenant isolation (row-level security).
- Edge protection (Cloudflare WAF / rate limiting) and security response headers.
- Centralised logging and monitoring retained in-region (ap-south-1).
- High availability via a synchronously-replicated YugabyteDB cluster with automatic leader failover (no committed-data loss on node failure).
- Tested, encrypted backups and a documented restore process.
04. Sub-processors
AirOne uses vetted sub-processors listed on our Sub-processors page. We provide advance notice of material changes and a right to object as described there.
05. Data-Principal Rights Assistance
AirOne assists you in responding to data-principal / data-subject requests (access, correction, erasure, grievance) and, on termination, returns or deletes personal data per your instruction and our retention policy.
06. Breach Notification
AirOne notifies you without undue delay on becoming aware of a personal data breach affecting your data, consistent with the DPDP (Data Protection Board + affected principals) and CERT-In timelines.
07. Request a DPA
Airavad Web Solutions Pvt. Ltd.
dpo@airavadwebsolutions.comEmail us to receive the current signed DPA (with the TOMs annex and, for EU/UK customers, the applicable transfer mechanism).