Data Processing Agreement (DPA)

1. Purpose and Scope

This Data Processing Agreement ("DPA") reflects the parties' agreement with respect to the processing of enterprise data by Aegisora on behalf of business customers, in accordance with applicable data protection laws.

2. Processing of Personal Data

Aegisora shall process organizational data and agent logs only on documented instructions from the controller, including with regard to transfers of corporate data to a third country or an international organization, unless required to do so by union or member state law.

3. Subprocessors

The customer authorizes Aegisora to engage subprocessors as necessary to provide the AI governance, monitoring, and security platform. Aegisora maintains an up-to-date list of subprocessors available upon request.