Data Processing
Addendum.

Standard DPA for Enterprise Customers. This document forms an integral part of the Master Service Agreement between NerdTech and the end-user.

Data Processor Role

NerdTech acts as a Data Processor under nerdOS, processing business data solely as instructed by the User (the Data Controller) to maintain system efficiency and industry-specific automation.

Sub-processing Protocols

We utilize strictly vetted sub-processors for core infrastructure (e.g., cloud hosting). A full list of sub-processors is available upon request for enterprise-level compliance audits.

Technical Security Controls

We implement rigorous technical and organizational measures, including multi-factor authentication, end-to-end encryption for sensitive fields, and periodic vulnerability scanning.

Incident Response

In the event of a suspected data breach, NerdTech maintains a 72-hour notification protocol to inform Data Controllers and relevant authorities, as required by law.

Require a Signed DPA?

For organizations requiring a signed, customized DPA with specific SCCs (Standard Contractual Clauses), please initiate our enterprise legal flow.