This is a starting template. It describes how the platform actually works, but it has not been reviewed by a lawyer for your jurisdiction. Have it checked before you rely on it.
Summary
This page summarises the DPA that governs our processing of personal data contained in your workspace. It is not a substitute for the signed agreement, request the executable copy at privacy@example.com.
What it covers
- Roles, you are the controller of workspace content, ExecCortex Platform is the processor.
- Instructions, we process only to provide the service and only on your documented instructions.
- Confidentiality, staff with access are bound by confidentiality obligations.
- Security, workspace isolation, role-based access, encryption in transit, optional two-factor authentication and IP rules.
- Sub-processors, a current list is published and you are told before a new one is added.
- Assistance, we help you answer data-subject requests and, where required, complete impact assessments.
- Breach notification, we tell you without undue delay after becoming aware of a personal-data breach.
- Deletion and return, on termination your data is returned or deleted, at your choice.
- Audit, we make available the information needed to demonstrate compliance.
Requesting a signed copy
Email privacy@example.com with your workspace name and the legal entity that should be named. We countersign and return it.