Data Processing Agreement
Last updated: July 14, 2026 · Required for GDPR compliance
This Data Processing Agreement ("DPA") is incorporated into and forms part of the agreement between Ajath, Inc. ("Processor") and the Customer ("Controller") for the use of the Ajath platform. It governs the processing of personal data by Ajath on behalf of the Customer in accordance with GDPR Article 28.
1. Definitions
"Personal Data," "Data Subject," "Processing," "Controller," and "Processor" have the meanings given in the GDPR (Regulation (EU) 2016/679). "Customer Data" means all data submitted by or on behalf of the Customer to the Service.
2. Processing Instructions
Ajath shall process Customer Data only on documented instructions from the Customer, including with regard to transfers of personal data to third countries, unless required to do so by applicable law. Ajath shall inform the Customer if, in its opinion, an instruction infringes GDPR.
3. Confidentiality of Processing
Ajath ensures that persons authorized to process Customer Data are committed to confidentiality or are under an appropriate statutory obligation of confidentiality.
4. Security Measures
Ajath implements appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including encryption in transit and at rest, access controls, regular security assessments, and incident response procedures.
5. Sub-processors
Ajath may engage sub-processors as listed on our Subprocessors page. We will notify Customers of changes 10 days in advance and enter into data processing agreements with each sub-processor.
6. Data Subject Rights
Ajath will assist the Customer, insofar as possible, in fulfilling its obligations to respond to requests from data subjects exercising their GDPR rights, taking into account the nature of the processing.
7. International Transfers
Where Customer Data is transferred outside the EEA, Ajath relies on Standard Contractual Clauses (SCCs) as adopted by the European Commission, supplemented by additional safeguards as appropriate.
8. Requesting a Signed DPA
Enterprise customers may request a countersigned DPA for their records. Please send your request to legal@ajath.us with the subject line "DPA Request — [Company Name]".