Data processing agreement.

For healthcare and multi-location customers we offer a long-form DPA covering Privacy Act 1988 obligations, AHPRA implications, breach notification, and subprocessor commitments. Email dpa@findlimelight.com to request it.

Summary

• Limelight is a Data Processor; you are the Data Controller for customer/patient data.
• Personal information stays in AWS ap-southeast-2 (Sydney).
• Breach notification within 72 hours of confirmed incident.
• Subprocessor changes notified 30 days in advance.
• Right to audit on reasonable notice for plans that include it.
• Deletion of customer data within 30 days of termination.