Legal
Contracts that withstand scrutiny.
Before an AI employee works with your data, the legal basis is in place: data processing agreement, confidentiality agreement, deletion concept and service level. IT, data protection and procurement can review all documents before the decision.
DPA under GDPRNDA as standardService level with a figureDeletion concept
Four documents that every review needs.
Data processing agreement
Governs the subject, duration and deletion of the processing under GDPR.
Request document ›Service level
Response times and maintenance windows with a figure, not with an adjective.
Request document ›The foundations, before the collaboration begins.
Contractual basis
DPA under the GDPR: Processing takes place on the basis of a data processing agreement that governs the subject matter, duration and deletion.
No third-country transfer: Processing and storage exclusively in data centres in Germany (Hetzner).
Confidentiality
NDA before content: A confidentiality agreement as standard, before we talk about your data and processes.
Need-to-know: Access to your data is role-based and limited to the minimum.
Service level
Response times: Critical matters within 4 hours, normal operation within 8 business hours.
Maintenance windows: Announced at least 48 hours in advance.
Subcontractors
Hosting partner: Hetzner, data centres in Germany, ISO/IEC 27001:2022 and BSI C5 Type 2 at the infrastructure level.
No silent chain: Subcontractors that are used are named in the DPA.
Privacy contact
datenschutz@scoreprise.ai