Skip to content
Email Justin

Legal / Data Processing / Last updated July 1, 2026

Data Processing Addendum

This page describes the data-processing commitments Five Star Solutions uses when it processes customer personal data as a processor. A signed order, DPA, or BAA may add more specific terms for a customer.

Who does what

For customer data inside an operator workflow, the customer decides why and how that data is processed. Five Star Solutions processes it to provide the service, operate the platform, secure the system, support the customer, and follow lawful instructions in the signed customer agreement.

Processor commitments

  • The customer is the controller for customer data processed by its operators. Five Star Solutions acts as processor for that customer data.
  • We process customer personal data only to provide, secure, support, and improve the contracted service, or as the signed agreement otherwise instructs.
  • We use subprocessors only as needed to provide the service and maintain a public subprocessor page for the current platform providers.
  • We help customers respond to data subject requests when they cannot reasonably complete the request through the product or their own connected systems.
  • We delete or return customer data according to the service configuration, the customer agreement, and lawful retention requirements.
  • PHI processing requires a separate BAA path. No PHI client is activated until the customer BAA and required subprocessor BAAs/scopes are complete.

Getting a signed copy

If your company needs an executed DPA, SCCs, a BAA, or customer-specific subprocessor terms, email Justin and include the customer name, jurisdiction, and whether the work involves PHI or other regulated data.