Data Processing Agreement (DPA)

1. Introduction

This Data Processing Agreement ("DPA") outlines how Tridan AI processes personal data in connection with providing its services. It is intended to ensure compliance with applicable data protection laws and regulations.

2. Definitions

For the purposes of this DPA:

• "Personal Data" refers to any information relating to an identified or identifiable individual.
• "Processing" means any operation performed on Personal Data, such as collection, storage, or sharing.
• "Controller" is the entity determining the purposes of data processing.
• "Processor" is the entity processing data on behalf of the Controller.

3. Roles and Responsibilities

Tridan AI acts as a Processor for customers who use our platform to process Personal Data. The customer (or their organization) acts as the Controller and is responsible for ensuring lawful data collection.

4. Data Processing Details

The processing activities covered by this agreement include:

• Processing Personal Data solely as instructed by the Controller
• Ensuring data confidentiality and security
• Using data for service-related purposes only

5. Security Measures

Tridan AI implements appropriate technical and organizational measures to protect Personal Data, including encryption, access controls, and regular security audits.

6. Data Subject Rights

We assist Controllers in fulfilling their obligations to data subjects, including:

• Right to access, rectify, or delete Personal Data
• Right to data portability
• Right to restrict or object to processing

7. Sub-Processors

We may engage third-party sub-processors for specific processing activities. A list of approved sub-processors is available upon request.

8. Data Transfers

Where Personal Data is transferred outside the European Economic Area (EEA), we rely on Standard Contractual Clauses or other legal mechanisms recognised under the GDPR and comparable laws such as the CCPA.

9. Breach Notification

In the event of a data breach, Tridan AI will notify the Controller without undue delay, providing details of the breach, affected data, and remedial actions taken.

10. Duration & Termination

This agreement remains in effect as long as Tridan AI processes Personal Data on behalf of the Controller. Upon termination, we will securely delete or return the data as per the Controller’s instructions.

11. Changes to This Agreement

Tridan AI reserves the right to update this DPA as needed. Updates will be posted on this page, and we recommend reviewing it periodically.

12. Contact Information

For questions regarding this Data Processing Agreement, contact us at privacy@tridan-ai.com.