Data Processing Agreement (DPA)

Last Updated: June 25, 2026

1.Scope and Applicability

This Data Processing Agreement ("DPA") governs the processing of personal data by AI APAC in connection with the enterprise services provided to subscribers, PR partners, and corporate entities under our main terms of service. It applies to all processing of personal data subject to regional data protection regulations (including PDPA and GDPR).

2.Roles of the Parties

To ensure clarity in corporate relationships, the processing roles are defined as:

Data Controller

The subscriber or partner entity directing the submission of professional files, articles, and firmographic registration lists.

Data Processor

AI APAC, which processes data (ingestion, telemetry analytics, AI summaries) exclusively on behalf of and according to the instructions of the Controller.

3.Technical and Organizational Measures

The Processor has implemented appropriate technical security safeguards to prevent data corruption or unauthorized disclosure, including:

  • Data at Rest: Encryption of all database records (The Vault) using AES-256-GCM.
  • Data in Transit: Mandatory TLS 1.3 edge-encryption on all network nodes.
  • Anonymization: Real-time regex scrubbing of PII (names, emails, cell numbers) prior to vector database storage or LLM processing.

4.Sub-processors

The Processor employs verified sub-processors (such as Cloud Run, Supabase, and LiteLLM nodes) for core hosting and model routing. The Processor remains fully responsible for the compliance of all appointed sub-processors.

Sub-processor Notification

PR Partners and enterprise controllers will receive email notifications at least 30 days prior to the onboarding of any new sub-processors to allow for audit reviews.