Data Processing Addendum

This DPA baseline supports design-partner conversations and early-access intake for OLYDI, a product of Valty, Inc. Executed customer terms control production processing.

Roles. For intake and the free scan, Valty, Inc. acts as processor of the limited personal data you submit and of the repository code context the scan reads. You remain the controller of your repository data.

Processing scope. Intake data is processed to qualify, schedule, and support onboarding. Repository code context is processed to produce findings and is not used to train models by default.

Security measures. The baseline includes access control, least privilege, encryption in transit, scoped and leased secrets, logging, subprocessor review, and deletion workflows. Work runs inside hosted task sandboxes with locked-down outbound access.

Subprocessors. We use a hosting and analytics provider, a CRM, an email provider, and a durable-backup store. A current subprocessor list is available on request.

Requests. Security and privacy review requests route through security@olydi.com. Enterprise data terms are executed on valty.ai.