Data Processing Agreement

For tenants subject to GDPR or comparable regimes.

Last updated 2026-05-03

Last updated 2026-05-03 — review with counsel before launch. This template is provided as-is and is not legal advice.

1. Roles

You are the data controller. PrimeAMC is the data processor for the personal data you upload into your tenant.

2. Scope of processing

We process personal data only on your documented instructions, namely the actions you take inside the dashboard.

3. Sub-processors

Listed in the Privacy Policy. We notify you in advance of any change.

4. Security

Encryption in transit and at rest, role-based access internally, audit logging, and quarterly access reviews.

5. Breach notification

We notify you within 72 hours of any confirmed breach affecting your tenant's data.

6. Data subject requests

We assist you in responding to data subject requests through self-serve export and deletion tooling.

7. International transfers

When personal data crosses regions, we rely on appropriate safeguards including the Standard Contractual Clauses (SCCs) approved by the European Commission.