This Data Processing Addendum ("DPA") forms part of the Terms of Service between ElasticD3M, LLC ("Processor") and the customer ("Controller") and governs processing of Controller's data.
Controller determines the purposes of processing; Processor processes data solely to provide the Services and on Controller's documented instructions, including the financial telemetry Controller connects.
Processor limits access to personnel bound by confidentiality obligations and with a need to access. Production access is restricted to authorized US persons.
Controller authorizes the subprocessors listed at /subprocessors. Processor remains responsible for their performance and will give notice of material changes.
All processing and storage occurs in United States regions. No processing in non-US regions.
Processor assists Controller, taking into account the nature of processing, with data-subject requests and with security, breach notification, and impact assessments to the extent applicable.
Processor notifies Controller without undue delay after becoming aware of a personal-data breach affecting Controller data.
On termination, Processor deletes or returns Controller data per the retention terms in the Privacy Policy, subject to legal-hold and audit-retention obligations.