Data Processing Agreement
Last updated July 17, 2026
Standard data processing terms for business customers under GDPR Article 28.
Last updated July 17, 2026
Standard data processing terms for business customers under GDPR Article 28.
The Processor is identified in the company information section above. The Customer is the organization entering into the Auroranexis subscription and acts as controller for customer-uploaded personal data.
Processing relates to personal data uploaded or generated in the Auroranexis workspace for the duration of the subscription and any agreed retention period thereafter.
Processing is limited to providing the Auroranexis platform, customer support, billing, security monitoring, audit logging, backups, and optional AI features enabled by the Controller. Processing occurs only on documented instructions of the Controller, these Terms, and applicable law.
Depending on Controller use: employee and contact data, client data, operational records, portal user data, logs, and communication content. Data subjects may include Controller staff, Controller clients, and authorized portal users.
The Processor implements appropriate technical and organizational measures (see Security Policy), ensures confidentiality of personnel, assists with data subject requests where required, notifies the Controller of personal data breaches without undue delay, and deletes or returns data upon termination subject to legal retention.
The Controller authorizes engagement of sub-processors listed on our Sub-processors page. Material changes are notified with reasonable notice. The Processor remains responsible for sub-processor performance under Article 28(4) GDPR.
Transfers outside the EEA use appropriate safeguards such as Standard Contractual Clauses. Details are available on request at legal@auroranexis.com.
The Processor makes available information necessary to demonstrate compliance and allows audits upon reasonable notice, subject to confidentiality and security constraints, or provides third-party audit summaries where available.
This page summarizes standard processing terms incorporated into the Terms of Service. Enterprise customers may request a countersigned DPA addendum via legal@auroranexis.com or sales@auroranexis.com. This summary does not replace an individually negotiated signed agreement where required.