Legal

Data Processing Agreement

Recitals

Article 1 — Definitions

Article 2 — Subject matter, nature and purpose of the processing

Article 3 — Duration

Article 4 — Categories of Data Subjects and Personal Data

Article 5.1 — Processing only on documented instructions

Article 5.2 — Confidentiality

Article 5.3 — Security of processing

Article 5.4 — Use of Sub-Processors

Article 5.5 — Assistance with Data Subject rights

Article 5.6 — Assistance with security obligations

Article 5.7 — Notification of personal-data breaches

Article 5.8 — Deletion or return at end of processing

Article 5.8a — Tenant warranty for full-mode snapshot lawfulness

Article 5.8b — Tenant warranty for file-transfer server ownership and credential authority

Article 5.9 — Information and audit

Article 6.1 — Default posture

Article 6.2 — Transfers outside the EEA

Article 6.3 — OpenAI specifically

Article 7 — Confidentiality

Article 8 — Liability

Article 9 — Indemnification

Article 10 — Term and termination

Article 11 — Survival

Article 12 — Order of precedence

Annex I — Subject Matter, Nature, Purpose and Categories

Annex II — Technical and Organisational Measures (TOMs)

Annex III — Authorised Sub-Processors

Annex IV — Contact Information

Signature

For the Controller

Name
Date

For the Processor

Name
Date