Data Processing Agreement
For businesses and accounting firms.
Draft. Final wording is being reviewed by our Nigerian lawyer and data protection officer.
Version 1.0 (draft). Last updated 7 October 2026.
When you put your business records into TaxAudit, your business (or its accounting firm) is the data controller and Rivium Analytics Ltd processes the records on its instructions. This agreement sets out how.
What we do
- Process the records only to provide TaxAudit, as you instruct.
- Keep them confidential, secure and separate from every other business (see Security).
- Use only the sub-processors listed, and tell you before adding new ones.
- Help you answer people's data requests and notify you without undue delay of any breach.
- Delete or return the records when you leave, except where the law requires us to keep them.
The full agreement is being finalised by our lawyer. Questions: dpo@taxaudit.ng.