Data Processing Addendum
Last updated: June 2026
Roles
For operational drilling data, the customer is the controller and Minebright Inc. is the processor. We process that data on the customer's behalf to provide the service.
Scope of processing
We process drilling data solely to provide and support the service, and only according to the customer's documented instructions.
Subprocessors
We rely on a limited set of infrastructure and analytics subprocessors. The current list is available on request, and we give notice of any material change before it takes effect.
Data residency and transfers
Data is stored in Canada by default, with regional residency available on request. Where data is transferred, we apply appropriate safeguards for the transfer.
Security and breach notice
We maintain security measures consistent with our Security page. In the event of a data breach affecting customer data, we notify affected customers without undue delay.
Return and deletion
On termination, the customer can export their data on request. We delete customer data within a defined retention window after the service ends.