1. Scope
If you are a stable owner who is a GDPR controller for your own end-customers, horsenose acts as your processor for that data, and this Addendum applies. The full machine-readable DPA — including Annexes I–IV with the Standard Contractual Clauses where applicable — lives at documentation/legal/dpa.md in the source repository and is in the process of being incorporated into the in-product render.
Our own sub-processor DPAs are tracked internally in our processor-DPA register; the public-facing list of those sub-processors appears in Privacy Policy §6.