Last updated: 13 June 2026
1. Purpose
This Data Processing Addendum is a template for SaaS clients that upload personal information into Bahlaloga systems, especially Compliance Cloud or Medical Debt Management System.
2. Roles
The client may be the responsible party for information it uploads. Bahlaloga may act as an operator or service provider where it processes information on the client’s instructions.
3. Client instructions
Bahlaloga will process uploaded client information only for the agreed service, support, security, backup and lawful administrative purposes.
4. Security controls
- Authenticated user access
- Role-based restrictions where implemented
- HTTPS
- Server-side backups
- Audit and login event records where implemented
- Restricted administrative access
5. Medical debt data
Healthcare clients must confirm that they are authorised to submit medical debt or patient account information and that such processing is lawful, necessary and limited to the intended debt-management purpose.
6. Subprocessors and hosting
Bahlaloga may use hosting, infrastructure, communication and support providers to operate the service. These providers may process limited information necessary to provide the service.
7. Return or deletion
On termination, the client may request export, return or deletion of information, subject to legal, accounting, backup and dispute-resolution retention requirements.