This DPA is a draft, not yet approved by independent legal counsel.
Nguyen AI is processor; enterprise is controller.
Data is secured per industry standards with encryption in transit and at rest. Each tenant operates in an isolated environment with per-tenant access controls.
Tenant data is retained per the tenant configured retention period. After retention expires, data is permanently deleted from all storage systems.
Sub-processors are listed in the Subprocessors document. Tenants are notified of changes at least 30 days in advance.
Data breaches are notified to tenants without undue delay, including scope, impact, and remediation steps.