Data Processing Addendum (template)
Last updated: 15 September 2026
Template DPA for EU AI Assurance OS workspaces. Have qualified counsel review before signature. Not legal advice.
Status
This page is a starting template for a processor DPA between Marti Soura Vamseekar (EU AI Assurance OS) and a customer organisation. It is not a signed contract and not legal advice. Execute a counsel-reviewed DPA before processing customer personal data in production.
Roles
Customer is the controller of account, invite, and AI-system metadata they submit. EU AI Assurance OSis a processor for that workspace data. Evidence content uploaded by the customer remains the customer's responsibility.
Processing
Purpose: host the governance control plane (registry, evidence, evals, audit, release gates). Duration: the subscription or sprint term plus backup retention. Location: EU region as specified on the order form. Sub-processors: hosting, email, and error monitoring as listed to the customer in writing.
Security
Tenant isolation by verified credentials, hashed API keys, JWT sessions, hash-chained audit, and optional object storage. This is not a SOC 2 report.