ReadyAED data processing agreement
The shape of the Data Processing Agreement for your organisation.
This page describes the Data Processing Agreement (DPA). A DPA sets the terms for personal data that one organisation processes for another. This page is for the legal, privacy and security teams of a ReadyAED customer.
The plain-language summary comes first. The full text follows it. The full text marks every clause that needs legal approval.
Plain-language summary
This summary is not the legal text. If the summary and the legal text disagree, the legal text wins.
A controller decides why and how personal data is processed. A processor handles the data for the controller. The parties, the roles and the scope need legal approval. legal-approved parties, roles and scope
The availability and the terms of the agreement are not confirmed for publication yet. DPA (Data Processing Agreement) availability and terms
The agreement covers the platform data: the register, the audit trail, inspection records and the subprocessors that process data for ReadyAED. Ask about the DPA through the Contact page, which names the privacy and legal route.
Full legal text
The clauses below are the operative text. Each clause needs legal approval before it is binding. this passage needs legal sign-off
Availability
The availability and the terms of the agreement are not confirmed for publication yet. DPA (Data Processing Agreement) availability and terms
This page describes the shape of the agreement. It is not the agreement.
Parties and roles
A controller decides why and how personal data is processed. A processor handles personal data for the controller. The parties, the roles and the scope of processing need legal approval. legal-approved parties, roles and scope
What the agreement covers
The agreement covers the personal data that ReadyAED processes for your organisation. The categories, the purposes and the duration need legal approval. legal-approved processing details: categories, purposes and duration
Subprocessors
A subprocessor is a vendor that processes data for ReadyAED. The agreement sets the rules for subprocessors and for changes to the list. legal-approved subprocessor terms and change notice The list is not published yet. subprocessor list Read the Subprocessors page.
Security measures
The agreement sets the security measures that ReadyAED must keep. legal-approved security measures Security controls are not confirmed for publication yet. security controls evidence (encryption, hosting, backups, penetration testing) — product and legal confirmation required Read the Security & Trust Center page.
Data subject requests
A data subject request is a request from a person about their personal data. The agreement sets how ReadyAED helps your organisation answer those requests. legal-approved data subject request support
Breach notification
The agreement sets what happens if personal data is breached. legal-approved breach notification terms
Audits
The agreement sets the audit and inspection rights for your organisation. legal-approved audit and inspection rights
International transfers
The agreement sets the safeguards for data that moves between regions. legal-approved international transfer terms confirmation of data residency options
Deletion and return
The agreement sets what happens to the data when the agreement ends. legal-approved deletion and return of data terms
Liability and term
The liability, indemnity, term and termination terms need legal approval. legal-approved liability and indemnity terms legal-approved term and termination terms
Governing law and signatures
The governing law, the venue and the signing process need legal approval. legal-approved governing law and venue legal-approved signature and execution process
Approval status
The wording above is not final. It needs legal approval before it is binding. legal-approved disclaimer text this passage needs legal sign-off
Effective date
The effective date is not published yet. legal-approved effective date
Change process
How changes to the agreement are handled is not published yet. legal-approved change notice process this passage needs legal sign-off
Contact
Ask about the DPA through the Contact page. The page names the privacy and legal route, and ReadyAED does not route a DPA request through sales. The DPA contact address is not published yet. legal-approved notice and contact terms
Read the Subprocessors page for the vendor list and the Privacy policy for personal data.