Draft — for Sasi's review. This is not legal advice.

Data Processing Addendum

This draft addendum describes how MF Profiler processes personal data that an adviser uploads about clients, under the Digital Personal Data Protection Act, 2023.

Client email and phone numbers are encrypted at rest. PAN is stored only as a hash plus last four characters when imported from a CAS in a later phase. CAS PDFs and passwords are never stored.