A market-calibrated data protection addendum for providers processing customer personal data, validated by privacy lawyers across the US, UK and EU. It covers processing instructions, subprocessors, security, incidents, audits and international transfers under the GDPR, the UK and Swiss regimes and US state privacy laws such as the CCPA.