Data Processing Addendum
This Data Processing Addendum ("DPA") forms part of the Agreement between UpliftOS and Customer for the provision of Services. This DPA sets forth the parties' obligations with respect to data protection in connection with the processing of personal data.
1. Definitions
- "Personal Data" means any information relating to an identified or identifiable natural person.
- "Processing" means any operation performed on Personal Data.
- "Controller" means the entity that determines the purposes and means of Processing.
- "Processor" means the entity that Processes Personal Data on behalf of the Controller.
- "Subprocessor" means any Processor engaged by UpliftOS.
2. Our Obligations
As a Processor, UpliftOS agrees to uphold the highest standards of data protection and security.
UpliftOS commits to the following obligations:
- Process Personal Data only on documented instructions from Customer
- Ensure persons authorized to process the Personal Data are bound by confidentiality
- Implement appropriate technical and organizational security measures
- Engage Subprocessors only with prior written consent
- Assist Customer in responding to data subject requests
- Delete or return all Personal Data upon termination
- Make available all information necessary to demonstrate compliance
- Allow for and contribute to audits and inspections
3. International Transfers
For transfers of Personal Data to countries outside the EEA, UK, or Switzerland that have not received an adequacy decision, we rely on the following mechanisms:
- Standard Contractual Clauses (SCCs) as approved by the European Commission
- UK International Data Transfer Agreement/Addendum
- The Swiss reading of the SCCs for transfers from Switzerland
Request a DPA
Enterprise customers can request a signed DPA by contacting our legal operations division.
Legal: [email protected]
Enterprise: [email protected]