Data processing agreement (DPA)
A data processing agreement (DPA) is the contract GDPR requires between a company and a vendor that processes personal data on its behalf. It sets out what data is processed and why, how it is protected, which sub-processors are used and what happens to the data when the contract ends.
How a DPA works
Under Article 28 of the GDPR, the company (the controller) may only use a vendor (the processor) under a written contract. For an AI Avatar, the DPA should cover conversation recordings, transcripts and analytics, and any likeness or voice data used to create a custom avatar.
Your legal or privacy team usually reviews the vendor's standard DPA before signing.
How Beyond Presence does it
Beyond Presence provides a DPA for its customers, published with its sub-processor list in the Beyond Presence Trust Center.
Frequently asked questions
Does Beyond Presence provide a DPA?
Yes. The Beyond Presence DPA is published in its Trust Center.
Where does Beyond Presence process my data?
In the EU, in GCP regions in Belgium and the Netherlands, or in your private cloud or on-prem.
Does Beyond Presence train models on my data?
No.