Legal
Data Processing Addendum
Processing terms applying where Eredox processes personal data on a customer's behalf.
The operative wording of this document is prepared and approved by Eredox. The structure below marks where that approved content is published. No clause is drafted or implied here.
Roles of the parties
Identification of controller and processor roles.
Scope and duration of processing
Subject matter, nature, purpose and duration of processing.
Categories of data and data subjects
Types of personal data and categories of individuals.
Processor obligations
Obligations relating to instructions, confidentiality and security.
Subprocessing
Authorisation, notification and flow-down obligations for subprocessors.
International transfers
Mechanisms relied upon for cross-border transfers.
Assistance and audit
Assistance with data subject rights, impact assessments and audit rights.
Breach notification
Notification obligations following a personal data breach.
Return and deletion
Treatment of personal data at the end of the engagement.
See NOVA against your own compliance obligations
Start free to explore the workflow, or walk through your framework, evidence and reporting requirements with us.
NOVA supports the readiness decision. Final launch and risk decisions remain human decisions.