Data Processing Agreement
Version 2026-11-09
This Agreement applies under Article 28 of the GDPR when DMV DEMOVEO processes personal data on behalf of the Customer. The Customer is the controller, and DMV DEMOVEO is the processor.
Scope of processing
| Item | Description |
|---|---|
| Purpose | Storing and analyzing Customer documents to provide Sauwe |
| Duration | The subscription, plus the deletion period below |
| Data | Personal data contained in uploaded documents, such as names, contact details, and signatures |
| Data subjects | Customer staff, project participants, contractors, and clients named in documents |
Processor obligations
The processor will:
- Process personal data only on the Customer's documented instructions.
- Ensure that authorized personnel are bound by confidentiality.
- Apply appropriate security measures, including isolation between organizations, encryption in transit, and access control.
- Help the Customer respond to data subject requests.
- Notify the Customer of a personal data breach without undue delay, and within 48 hours of becoming aware of it.
- Help the Customer with security, breach, and impact assessment obligations.
- Make available the information needed to demonstrate compliance, and allow reasonable audits with 30 days' notice.
Subprocessors
The Customer authorizes the listed subprocessors. We will give 30 days' notice of a new subprocessor, and the Customer may object on reasonable grounds. Each subprocessor is bound by equivalent data protection obligations.
Model providers
Documents sent to artificial intelligence providers are processed only to generate results for the Customer. We will only use providers whose terms prohibit training on this content.
International transfers
Transfers outside the European Economic Area rely on an adequacy decision or the European Commission's Standard Contractual Clauses.
Return and deletion
The Customer can delete its organization at any time. Personal data is then deleted within 30 days, except where the law requires retention. Backups are overwritten on their normal cycle.