Data processing agreement
The terms we process your data under.
Where your documents contain personal data, you are the controller and Nemosyne AI B.V. is the processor. The data processing agreement is the contract that says so, and what each of us has to do about it. It sits alongside the terms, the privacy policy and the sub-processor register.
The agreement text is not published on this page yet. Ask us for it at [email protected] and we will send the version in force, or sign yours if you would rather use your own paper.
What it covers
- The parties. You, as controller of the personal data inside the documents and systems you connect; Nemosyne AI B.V., as processor acting on your instructions.
- The subject matter. Reading the sources you connect, building your firm’s memory from them, and serving that memory back to the people you have granted access.
- The sub-processors. The companies on our sub-processor register, and the notice you get before that list changes.
- Security and deletion. What we enforce by construction, and what happens to your data when you leave — both described, in our own words and with their limits, on the trust page.
- Transfers. Where the processing happens, and the transfer mechanism where any of it leaves the European Economic Area.
Getting a copy
Ask, and we send it. We would rather sign a DPA before you upload anything than after, and we would rather answer your security review’s questions in writing than in a call.