The data-processing agreement defines roles, subprocessors, retention, deletion, security review, and cross-border data handling before production customer data is processed.
Document Sections
Prompt sets, URLs, answer snapshots, account notes, contact records, and integration payloads are documented by workspace.
Pilot and production retention windows stay explicit, exportable, and deletable by agreed process.
Hosting, analytics, CRM, email, and AI service subprocessors are disclosed before production use.
Customer-requested deletion covers workspace evidence, contact intake records, exports, and generated artifacts.