Data Processing Agreement

The customer is the data controller. Rilla Shield Defence Pty Ltd (ACN registered in Australia) is the data processor and processes personal information only on the customer's documented instructions, which include use of the platform by the customer's authorised users.

Processing is limited to the provision of invoice, supplier, payee and pay-run fraud detection services for the duration of the customer's subscription, plus any retention period the customer selects for their audit trail.

• Business contact details of authorised users (name, work email, role).
• Supplier and payee business details (entity name, ABN, contact details, BSB and account number).
• Invoice and pay-run metadata (amounts, dates, references, document fingerprints).
• Access and verdict logs (who scanned what, when, and the resulting decision).

RILLA Shield does not require or request consumer credit data, health data, or government identity documents. Where an identifier must be shared across the network for cross-customer fraud signals, it is one-way hashed before it leaves the customer's workspace.

Accounting and job-management integrations (Xero, QuickBooks Online, MYOB, Simpro, ServiceM8 and others) are connected with read scopes. RILLA Shield does not initiate payments, hold funds, or connect to a customer's bank account to move money. Bank details are checked for fraud signals only.

• Encryption in transit (TLS 1.2+) and at rest for all customer data.
• Row-level access controls enforced at the database, scoped to the authenticated user's workspace.
• Optional SAML single sign-on, passkeys and multi-factor authentication for user access.
• Append-only, hash-chained audit logging of scans, verdicts, overrides and bank-detail changes.
• Least-privilege internal access with logged administrative actions.
• A published vulnerability disclosure programme and continuous automated security scanning.

The customer authorises the sub-processors below. We give notice before adding a new sub-processor that processes customer personal information, and the customer may object on reasonable data-protection grounds.

Personnel with access to customer data are bound by confidentiality obligations and are granted access only where required to deliver or support the service.

We will assist the customer, taking into account the nature of processing, with data subject access, correction and deletion requests, with privacy impact assessments, and with regulator engagement where the request relates to data we process on the customer's behalf.

We will notify the customer without undue delay, and in any case within 72 hours, of becoming aware of a personal data breach affecting their data, including the nature of the breach, likely consequences and the measures taken. Our incident handling process is described in our data breach response page.

Retention windows are configurable per workspace. On termination, the customer may export their audit trail and scan history. Unless a longer period is required by Australian law, customer data is deleted from production systems within 30 days of termination and purged from backups on the normal backup rotation.

Customer data is primarily hosted in Australia. Where a sub-processor processes data outside Australia, we require contractual protections consistent with Australian Privacy Principle 8 before any transfer occurs.

On reasonable notice and no more than once per year (or after a material security incident), we will provide the information reasonably necessary to demonstrate compliance with this agreement, including our security documentation and the results of our automated security scanning.

Privacy and data protection enquiries: admin@rillashield.app. Enterprise customers requiring a countersigned DPA, security questionnaire response or vendor onboarding pack can request one via our contact page.