Scope & Purpose
This Data Processing Agreement ("DPA") describes how ComplAIbridge processes personal data on behalf of customers in connection with the platform.
Roles of the Parties
For the purposes of applicable data protection law, the customer acts as data controller and ComplAIbridge acts as data processor with respect to personal data submitted to the platform.
Processing Instructions
ComplAIbridge processes personal data only on documented instructions from the customer, including with regard to transfers, unless required to do otherwise by law.
Sub-processors
ComplAIbridge may engage sub-processors to support the platform (such as cloud hosting providers), each bound by data-protection obligations no less protective than those set out in this agreement. A current list of sub-processors is available on request.
Security Measures
- Encryption of data in transit and at rest.
- Role-based access controls and audit logging.
- Regular security reviews and vulnerability management.
Data Subject Requests
ComplAIbridge will assist the customer, insofar as reasonably possible, in responding to requests from data subjects exercising their rights under applicable data protection law.