Data Processing Agreement

Version 2026-10-11, updated 2026-10-11. This agreement is part of the Terms of Service and is accepted with them.

For customers subject to the GDPR or similar laws, JML Software Solutions LLC (trading as Nightroll) processes personal data only on your documented instructions: to run Shift as you configure it.

We keep personal data confidential, protect it as described on the security page, use only the subprocessors listed (and post changes there 30 days before they take effect), give your admins the tools to answer data-subject requests themselves (export, change and remove members and their data), tell you of a personal-data breach without undue delay, and delete the data when your organization is deleted.

Transfers outside the EEA, UK or Switzerland rely on the EU Standard Contractual Clauses (module 2, controller to processor) and the UK Addendum, incorporated by reference.