Data Processing Agreement

DRAFT — PENDING COUNSEL REVIEW (Plan 295). Not legal advice.

Where we process personal data on your behalf, we act as a processor under GDPR Art. 28. This DPA covers processing scope, security measures, subprocessor authorization, international-transfer safeguards (Standard Contractual Clauses for EU→US transfers), and breach notification.