Data Processing Agreement (DPA)

1. Purpose and Scope

This Data Processing Agreement ("DPA") governs the processing of personal data by ConformityAI, Inc. ("Processor") on behalf of our customers ("Controller") in accordance with GDPR, CCPA, and other applicable data protection laws.

2. Data Processing Details

3. Processor Obligations

We commit to:

• Process personal data only in accordance with your instructions
• Implement appropriate technical and organizational security measures
• Ensure confidentiality and restrict access to authorized personnel
• Assist with data subject rights requests
• Notify you of any data breaches without undue delay
• Maintain records of processing activities

4. Sub-Processors

We may engage sub-processors (e.g., cloud hosting providers) to process data. We ensure all sub-processors are bound by equivalent data protection obligations. A list of current sub-processors is available upon request.

5. Data Transfers

International data transfers are conducted in accordance with applicable laws, using Standard Contractual Clauses (SCCs) where required. Enterprise customers can specify data residency requirements.

6. Data Deletion

Upon termination of the service, we will delete or return all personal data in accordance with your instructions, unless retention is required by law.

7. Contact

For DPA-related inquiries, contact us at stacksavvy001@gmail.com.