Data Processing Agreement
Effective Date: August 13, 2026
1. Introduction
This Data Processing Agreement (“DPA”) supplements the Terms of Service between Pleed (the “Processor”) and an enterprise customer (the “Controller”).
2. Scope and Purpose of Processing
The Processor processes personal data only to the extent necessary to provide the Services and for the purposes instructed by the Controller, including not using it to train third-party AI models.
3. Processor’s Obligations
The Processor processes personal data only on documented instructions, ensures confidentiality of authorized persons, and implements appropriate security measures.
4. Sub-processors
The Processor may engage vetted sub-processors, notifying the Controller before additions. The Processor remains liable for sub-processors’ acts.
5. Data Security and Breach Notification
The Processor maintains security measures appropriate to the risk and notifies the Controller within 72 hours of becoming aware of a personal data breach.
6. Assistance and Audit
The Processor assists the Controller with data subject requests and, where reasonable, allows audits.
7. Term and Termination
This DPA takes effect and terminates together with the Terms of Service. On termination, the Processor deletes or returns personal data at the Controller’s choice.
8. Governing Law
This DPA is governed by the law specified in the Terms of Service. To request a formally executed DPA, contact: support@pleed.ai.