Data Processing Agreement
For tenants subject to GDPR or comparable regimes.
Last updated 2026-04-26
This document is being finalized with our legal counsel. The version below is a working draft and will be replaced before public launch.
1. Roles
You are the data controller. prime-amc is the data processor for the personal data you upload into your tenant.
2. Scope of processing
We process personal data only on your documented instructions, namely the actions you take inside the dashboard.
3. Sub-processors
Listed in the Privacy Policy. We notify you in advance of any change.
4. Security
Encryption in transit and at rest, role-based access internally, audit logging, and quarterly access reviews.
5. Breach notification
We notify you within 72 hours of any confirmed breach affecting your tenant's data.
6. Data subject requests
We assist you in responding to data subject requests through self-serve export and deletion tooling.