Enterprise Data Processing
Data Processing Addendum Placeholder
This placeholder records the intended enterprise DPA shape for pilots that require formal data-processing terms before deployment.
Purpose
The future DPA will define the customer as controller or data owner, NexusAI as processor or service provider where applicable, and the permitted processing activities for the pilot.
Processing scope
Expected processing includes ingestion, extraction, classification, evidence storage, embeddings, retrieval, dashboard synthesis, recommendations, approvals, audit events, and export generation.
Subprocessors
The DPA should list infrastructure, auth, database, object storage, and model providers used for the selected deployment mode, including any customer-approved local or private-cloud alternatives.
Controls
The DPA should cover data retention, deletion, key rotation, access controls, audit logs, incident notification, restricted data handling, and local-only processing requirements.