GDPR Data Processing Agreement (Outline)

Last updated: 13 May 2026 • Triratna Labs Ltd • Company Registration No.: 14829365 • ICO registration may be asserted where applicable • Contact: [email protected].

Parties

Triratna Labs Ltd may act as a processor for customer organisations that sign an Order Form. For international transfers we use SCCs / UK-approved mechanisms where relevant.

Subject matter & duration

Processing supports hosting and delivering the PortfolioVue services for the term of your contract and any lawful wind-down retention window.

Nature/purpose personal data categories

Account identity, integrations metadata, and aggregated usage where applicable. The service does not execute trades or provide personalised investment advice.

Subprocessors

List updated with notice timelines and objection windows per enterprise Order Form Annex B.

Assistance with data subject requests

Processor assists Controller within timelines subject to lawful instructions reimbursement.

Breach notifications

Processor notifies Controller expediently with investigation updates.

Deletion/return post-termination

Unless legal retention requires otherwise, data is returned via export, then erased using cryptographic wiping where feasible. Limited snapshots may be retained where compelled by law.