Trust center
Data Handling and DPA
Partners control the client files they upload to CAMAudit. This page explains what data enters the partner workspace, how it is processed, which providers support the service, and how to request Data Processing Addendum review.
Last updated: June 2026
Partner-owned client files
CAMAudit is built for firms that serve many commercial NNN-lease clients. The partner decides which client files to upload, who on the partner team can access them, and when files should be removed.
Uploads should only include documents the partner is authorized to process for its firm, client, or engagement. CAMAudit does not sell uploaded data.
Data processed
- Partner account and workspace records
- Client, property, lease, and CAM statement files
- Extraction records, audit findings, reports, and dispute letter drafts
- Billing, support, security, and legal acceptance records
Processing purpose
Uploaded documents are processed to run lease review, extraction, classification, deterministic CAM checks, report generation, dispute letter draft support, billing, security, reliability, and partner support.
Uploaded documents are not used to train provider models where our provider contracts prohibit that use.
Subprocessors
| Provider | Purpose |
|---|---|
| Cloudflare and Cloudflare R2 | Website delivery, edge services, and document storage where used. |
| Supabase | Database, authentication, account records, and access control. |
| Stripe | Payment processing, payments, invoices, and refunds. |
| Contracted AI provider | Lease and statement extraction and classification for audit delivery. |
Retention and deletion
Source documents stay in the partner account for audit history, multi-year analysis, re-downloads, and related service features unless deletion is requested or legally required.
Derived records may be retained to operate the service, preserve account history, meet legal and billing duties, and improve reliability. Partners can request deletion, export, or correction of eligible data by email.
DPA requests
The Data Processing Addendum is part of the Partner Terms. You accept it when you create your workspace. There is no separate document to sign.
Need a custom security questionnaire or a procurement review? Emailangel.campa@camaudit.iowith your firm name and deadline.
Related policies
This page summarizes operational handling. The full legal policy remains thePrivacy Policy. Partner commercial terms live in thePartner Terms.