Data Processing Addendum

This DPA forms part of the Agreement between [Company Name] (Processor) and the customer (Controller) for the provision of the Services.

1) Subject Matter & Duration

Processing of Customer Data (e.g., exposure, losses, program details) for the term of the Agreement.

2) Nature & Purpose

Hosting, transformation, analytics, and generation of event response, optimization, and governance outputs.

3) Categories of Data & Data Subjects

• Business contact data for users; policyholder data only if provided (minimize PII).

4) Processor Obligations

• Process only on documented instructions; confidentiality; security measures; assistance with data subject requests; deletion/return at end of term.

5) Subprocessors

Authorized subprocessors listed at /subprocessors with notice of changes and objection mechanism.

6) International Transfers

Where applicable, the EU SCCs/UK IDTA (and any required addenda) apply.

7) Audits

Reasonable audits and questionnaires, subject to confidentiality and frequency limits.