1. Scope and Applicability
This Data Processing Agreement ("DPA") supplements the Terms and Conditions and governs the processing of Personal Data by Persona X on behalf of the Client. This framework ensures absolute compliance with the General Data Protection Regulation (GDPR) and equivalent global data privacy frameworks.
2. Roles of the Parties
For the purposes of this DPA, the Client acts as the Data Controller, and Persona X acts as the Data Processor. Persona X shall process data solely on the documented instructions of the Client and for the strict purpose of providing the Trident intelligence services.
3. Sub-Processor Registry
Persona X utilizes specialized infrastructure to maintain service fidelity. The Client authorizes the use of the following sub-processors:
- Cloud Infrastructure: Amazon Web Services (AWS) - Hosting & Compute
- Secure Telemetry: Google Cloud Platform (GCP) - Edge Processing
*Persona X will notify the Client 30 days prior to the addition of any new sub-processor.
4. Incident Response & Breach Notification
In the event of a confirmed Security Incident involving Client Data, Persona X will notify the Client's designated security contact without undue delay, and in no event later than 48 hours after verifying the breach. The notification will include the nature of the breach, the data affected, and the mitigation steps deployed.