Data processing agreement (template)
Last updated:
This page summarises the French version, which is the only binding text.
- Signed with each client before any personal data is processed on their behalf.
- We process data only on your documented instructions, and only the data the task needs.
- Security measures, sub-processors and AI models are listed in annexes, completed for each assignment.
- Any data breach is reported to you within 48 hours.
- No transfer outside the European Union without your written agreement.
- AI services are used through their business offers (API); we check at go-live that their terms exclude training on your data.
- At the end of the contract, your data is returned, then deleted within 30 days.