Data Processing Addendum (DPA)

Introduction

This DPA forms part of the Terms & Conditions of Intus Lab Inc.

Parties

• Controller: Customer
• Processor: Intus Lab Inc

Scope of Processing

• SaaS, AI, API, analytics, and data services
• Account data, usage data, identifiers, metadata
• End users, customers, employees, contractors

Processor Obligations

Intus Lab shall:

• Process data only per documented instructions
• Ensure confidentiality
• Implement security safeguards
• Not sell personal data

Sub-Processors

Authorized for cloud, analytics, and infrastructure services with equivalent safeguards.

Data Subject Rights

Assistance provided for GDPR rights requests.

Security Measures

Includes:

• Access controls
• Encryption (where applicable)
• Monitoring
• Least-privilege access

Data Breach

Notification without undue delay in compliance with GDPR Articles 33–34.

International Transfers

Handled via EU Standard Contractual Clauses or lawful mechanisms.

Data Deletion

Data deleted or returned upon termination unless legally required.

Audits

Compliance information provided upon reasonable request.

Governing Law

Delaware, USA (unless GDPR requires otherwise).

Contact