Legal

Data Processing Addendum

When ASINRx processes personal information on a customer's behalf, that processing is governed by our Data Processing Addendum (DPA) — including CCPA service-provider terms and, where applicable, an EU/UK international-transfer module incorporating the Standard Contractual Clauses.

The DPA covers, among other things:

• the subject matter, duration, nature, and purpose of processing;
• processing only on the customer's documented instructions;
• confidentiality, security measures, and personnel obligations;
• subprocessor authorization, flow-down terms, and change notice (see the current Subprocessor List);
• assistance with data-subject requests and security-incident notification; and
• return and deletion of customer data at the end of the engagement.

To receive the current DPA for review or execution, email legal@asinrx.com from your company address with your legal entity name, and we'll return a signature-ready copy. Executed DPAs are incorporated into your agreement with us as described in the Terms of Service.