DDNC DATA PROCESSING AGREEMENT

This downloadable DPA is provided for client review before onboarding.

Controller and processor roles depend on the agreed client engagement. The final contracting entity, registration details, registered address, governing law, forum and applicable data protection regime remain pending final legal approval for the DDNC platform owned by Ultrattek.

Client documents are stored in the European Union, Ireland region. Documents and case records are retained for 5 years after case closure, then permanently deleted in accordance with the Terms.

DDNC applies access restriction, encryption in transit and at rest, antivirus scanning, audit logging and documented chain of custody for client documents.

Subprocessor list:
Amazon Web Services, Ireland, hosting and storage.

Security incident notification:
DDNC notifies the client within 48 hours of becoming aware of a security incident affecting client documents or data.

This document is prepared for legal review and should be replaced by the final lawyer reviewed DPA before the full client portal is launched.