Data Processing Agreement

This Data Processing Agreement ("DPA") forms part of the agreement between you ("Customer") and FusionPointAI ("Processor") for the FusionPointAI service, and applies whenever FusionPointAI processes personal data on Customer's behalf and on Customer's instructions.

1. Subject matter and duration

FusionPointAI processes personal data solely to provide the service described in the Terms & Conditions, for the duration of the underlying agreement between the parties.

2. Nature and purpose of processing

Processing covers the categories of data Customer submits through the service - account, contact, billing, and support data - for the purpose of operating the platform, providing support, and meeting legal obligations.

3. Confidentiality

FusionPointAI ensures that personnel authorised to process personal data are subject to a duty of confidentiality.

4. Security measures

FusionPointAI implements the technical and organisational measures described on our Security, and will update them as the service evolves.

5. Sub-processors

Customer authorises FusionPointAI to engage the sub-processors listed on our Sub-processors. We will give reasonable notice before adding a new sub-processor so Customer can object on legitimate grounds.

6. Data subject rights

FusionPointAI will provide reasonable assistance to Customer in responding to requests from data subjects exercising their rights under applicable data protection law.

7. Personal data breach notification

FusionPointAI will notify Customer without undue delay after becoming aware of a personal data breach affecting Customer's data.

8. International transfers

Where personal data is transferred outside the customer's jurisdiction, FusionPointAI will use appropriate safeguards recognised under applicable data protection law.

9. Deletion or return of data

On termination of the service, FusionPointAI will delete or return Customer's personal data, except where retention is required by law.

10. Audit

FusionPointAI will make available information reasonably necessary to demonstrate compliance with this DPA, and will allow for audits on reasonable notice.

11. Governing law

This DPA is governed by the laws of England and Wales.

Questions about this DPA: [email protected]