Data Processing Addendum (DPA)
Last Updated: March 1, 2026
This DPA governs the processing of Personal Data by Ed & Sy Inc. (Processor) on behalf of the Customer (Controller).
1. Scope
This agreement applies where Ed & Sy Inc. processes personal data subject to PIPEDA or GDPR as part of the Lead Rosetta service.
2. Processor Obligations
- Process data only on the documented instructions of the Customer.
- Ensure all personnel processing data are subject to confidentiality.
- Assist the Customer in responding to Data Subject requests.
3. Security
Processor implements industry-standard technical measures (encryption, access controls) to protect data.
4. Sub-processors
Customer authorizes the use of OpenAI, Google, and Stripe as sub-processors to facilitate the service.