Data Processing Addendum

This Data Processing Addendum (“DPA”) forms part of the agreement between Nubevo Consulting, Inc.(“Processor”) and the customer (“Controller”) and applies where we process personal data on the customer's behalf.

Roles & scope

The customer is the controller and Nubevo the processor. We process personal data only on documented instructions and for the purpose of providing the services.

Security & confidentiality

• We apply appropriate technical and organizational measures (encryption in transit, access controls, monitoring).
• Personnel with access are bound by confidentiality.
• We notify affected customers of a personal-data breach without undue delay.

Subprocessors

We use the subprocessors listed at nubevo.com/subprocessors. We remain responsible for their performance and will give notice of material changes to customers under this DPA.

Data subject rights & deletion

We assist the customer in responding to data-subject requests, and on termination we delete or return personal data except where retention is legally required.

Requesting a signed DPA

To execute a countersigned DPA, contact support@nubevo.com.