Data Processing Addendum

Last updated: July 29, 2025

1. Purpose and Scope

This Data Processing Addendum ("DPA") forms part of the Terms of Service between ProgressiveDocs and its users, and sets out the terms that apply when ProgressiveDocs processes personal data on behalf of users in connection with the services.

2. Definitions

• Personal Data: Any information relating to an identified or identifiable natural person
• Processing: Any operation performed on personal data
• Data Controller: The entity that determines the purposes and means of processing personal data
• Data Processor: The entity that processes personal data on behalf of the controller

3. Roles and Responsibilities

ProgressiveDocs acts as a Data Processor when processing personal data on behalf of users. Users remain the Data Controllers for their personal data.

4. Data Processing Activities

ProgressiveDocs processes personal data for the following purposes:

• Providing and maintaining the ProgressiveDocs platform
• Processing user authentication and authorization
• Storing and managing patient records and clinical notes
• Generating reports and analytics
• Providing customer support

5. Data Security

ProgressiveDocs implements appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of personal data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication mechanisms
• Data backup and disaster recovery procedures

6. Data Subject Rights

ProgressiveDocs will assist users in responding to data subject requests, including requests for access, rectification, erasure, and data portability.

7. Contact Information

For questions about this DPA, please contact us at:

• Email: privacy@progressivedocs.com
• Phone: 1-800-THERAPY