Data Processing Agreement

This Data Processing Agreement ("DPA") applies when Human AI processes personal data on behalf of a business customer ("Customer") in providing the Services, and forms part of the agreement between Customer and Human AI.

For this DPA, Customer acts as the controller (or business) and Human AI acts as the processor (or service provider) of Customer personal data.

Human AI will process Customer personal data only on Customer's documented instructions, including as set out in the agreement and through Customer's configuration of the Services, unless otherwise required by law.

Human AI will not sell Customer personal data or use it for any purpose other than providing, securing and supporting the Services.

Human AI ensures that personnel authorized to process Customer personal data are bound by appropriate confidentiality obligations.

Human AI implements appropriate technical and organizational measures to protect Customer personal data, including encryption, access controls, logging and monitoring, as described in our Security Policy.

Customer authorizes Human AI to engage subprocessors to help provide the Services. Human AI will impose data protection obligations on subprocessors that are no less protective than this DPA and remains responsible for their performance.

Human AI will provide information about its subprocessors on request and will give notice of new subprocessors, allowing Customer a reasonable opportunity to object.

Taking into account the nature of the processing, Human AI will assist Customer in responding to requests from individuals exercising their data protection rights and with data protection assessments where required.

Human AI will notify Customer without undue delay after becoming aware of a security incident affecting Customer personal data and will provide information reasonably needed for Customer to meet its obligations.

At the end of the Services, Human AI will delete or return Customer personal data at Customer's choice, unless retention is required by law.

Human AI will make available information reasonably necessary to demonstrate compliance with this DPA. Requests can be sent to legal@humanai.app.