Data Processing Agreement
For customers who need a formal DPA for GDPR or CCPA. Agentics does not hold SOC 2, ISO 27001 or any other security certification.
1. What a DPA covers
Our standard Data Processing Agreement covers:
- Data processing purposes and legal basis
- Subject matter and duration of processing
- Nature and purpose of the processing
- Type of personal data processed
- Categories of data subjects
- Subprocessor list with locations
- Data subject rights procedures
- Breach notification (72-hour commitment)
- Data deletion upon contract termination
- Standard contractual clauses (EU SCCs)
2. Our subprocessors
The current list, with what each company does and where, is on the subprocessors page. It names the embedding provider, the reranker host and error monitoring as well as hosting, database, email and billing. The DPA you sign lists the same companies.
Some of these companies hold their own certifications, such as SOC 2. Those certifications are theirs. Agentics does not hold SOC 2, ISO 27001 or any other security certification, and no independent audit of Agentics has been done.
3. Data locations
All data is processed and stored in the United States. For EU clients, we rely on Standard Contractual Clauses (SCCs) for transfers from the EU to the US.
4. Request a DPA
Thank you. A member of our team will send your DPA within 2 business days.
— Agentics Technologies LLC