Data Processing Addendum

Last updated October 8, 2026. Questions about this document: sammooney@fulleleven.com.

Roles and instructions

This addendum applies when a sports organization uses FullEleven to process personal data it controls. The organization acts as controller or equivalent business and provides documented instructions. FullEleven processes that data to provide, secure, and support the configured service.

Confidentiality and security

Personnel and service providers with access are expected to protect personal data. The service applies organization-scoped access controls, role checks, audit events, and encryption for designated sensitive fields. Production safeguards depend on deployment configuration and must be verified before an organization relies on them.

Subprocessors and incidents

The deployment-specific subprocessor list must be supplied to the organization before processing begins. The parties should agree on notice timing, cooperation, and contact routes for a confirmed personal data incident before this addendum is approved.

Requests and end of service

FullEleven will provide service controls that help the organization review data-subject requests. On termination, data export and deletion are subject to the organization’s instructions, backups, legal retention obligations, and records that must be retained or pseudonymized.