PE
PE Proper LEGAL CASE SUITE
peproper.legalcasesuite.com
⚖️ LAW-FIRM SECURITY & DATA PROTECTION

Data Processing Addendum (DPA)

Effective Date: August 10, 2026 | Operative Entity: VBDGS LLC

This Data Processing Addendum ("DPA") governs the processing of personal data and client case records by VBDGS LLC ("Processor") on behalf of participating law firms, mediators, and legal professionals ("Customer" or "Controller") utilizing peproper.legalcasesuite.com.

1. Scope & Processing Roles

Customer acts as Data Controller determining the purpose of matter records. Processor processes data strictly to provide divorce property inventory management, participant intake, mathematical calculations, scenario comparison, photographs/documents, draft property schedules, data exports, and supporting matter records.

2. Security Safeguards & Technical Controls

Processor implements technical measures including: Database and uploaded-media storage encrypted at rest using AES-256 through underlying managed storage infrastructure (PostgreSQL & AWS S3); TLS 1.2/1.3 encryption in transit; automated processing of supported image uploads to remove embedded EXIF metadata (including GPS coordinates, camera-identification fields, and EXIF timestamps); tenant-scoped application authorization controls designed to prevent unauthorized cross-account record access; and cryptographic document hashing.

3. Authorized Subprocessors

Processor engages strictly vetted third-party subprocessors for hosting, storage, and billing:

  • PostgreSQL Cloud Infrastructure: Managed relational database storage protected by tenant-scoped application authorization controls.
  • Encrypted Object Storage (AWS S3): Secure document and photo evidence storage.
  • Paddle Inc.: Merchant of Record for subscription billing and tax compliance.

4. Security Incident Notification Commitment

In the event of a confirmed security incident affecting Customer case records, Processor will notify Customer without undue delay and within the timeframe specified in this Law-Firm DPA (no later than 72 hours after confirming a breach).

5. Data Retention, Portability & Deletion

Upon termination of service or explicit account deletion request, Processor will delete or return all Customer case records, evidence documents, and photo uploads within 30 days, subject to statutory tax or legal retention requirements.

6. Professional Responsibility & Use of Outputs

PE Proper outputs are draft mathematical calculations and user-selected allocation scenarios based on information, classifications, values, and assumptions entered into the platform. Outputs do not constitute legal conclusions, recommended settlements, predictions of court outcomes, or determinations of legal entitlement. Professional legal judgment remains the sole responsibility of licensed counsel.