There is a distinction worth stating plainly, because it decides which document applies. The data EdgeOrigin sells is collected from public, licensed, and commercial sources and delivered as a product; it is governed by your commercial agreement and by the licensing terms attached to it. The documents on this page govern something much smaller: the personal information we process to run a website and a business, such as a form submission or an account contact.
The Privacy Policy describes that second category. The Terms of Service govern use of the site and the services. The Data Processing Addendum is the instrument for clients who need processing terms in place, and the Subprocessors list names the providers involved in operating the service, which is the page a data governance review usually asks for first.
For a countersigned DPA, a security questionnaire, or a question about how a particular dataset is sourced, contact us rather than working from these documents alone. Provenance questions in particular are answered with evidence: every record we deliver carries its own lineage.
Two questions come up often enough to answer here. Transport: every connection between our network and your systems negotiates hybrid post-quantum key exchange, and what that protects against is set out on the post-quantum security page. Sourcing: coverage is assembled from public, licensed, and commercial sources, and the licensing terms of a dataset - what may be derived from it, redistributed, or used to train a model - are part of the commercial agreement rather than something inferred from these policies.