# Data Processing Addendum — WardCheck (draft)

Parties: `[controller]` and `[processor]`. Purpose: aggregate occupational-wellbeing quality improvement for one volunteer unit, 90 days. No patient, EHR, payroll, performance, diagnosis, or free-text data. Controller determines lawful basis, notices, access, and retention. Processor uses UAE-hosted services only, applies least privilege, audit logging, encryption in transit/at rest, breach notice, deletion at end of term, and no model training on controller data. Subprocessors require prior written approval. Counsel must complete this draft.