Data Processing Addendum (DPA)

Last updated: June 2026

⚠️ Placeholder — Not for execution. This DPA is a placeholder only. It has not been drafted or reviewed by legal counsel. A qualified privacy attorney must draft the final DPA before it is presented to or signed by any customer.

What is a Data Processing Addendum?

[PLACEHOLDER] A Data Processing Addendum (DPA) is a contract between NuroTrack (as data processor) and an enterprise customer (as data controller) that governs how personal data is processed on the customer's behalf. DPAs are required under GDPR and other privacy regulations when a data processor handles personal data on behalf of a controller.

Who Needs a DPA?

[PLACEHOLDER] Enterprise customers who are subject to GDPR, CCPA, or similar privacy regulations and whose employees' or end-users' personal data is processed through NuroTrack may require a DPA.

Requesting a DPA

[PLACEHOLDER] To request a Data Processing Addendum, contact us at [LEGAL CONTACT — TBD]. Our team will work with you and our legal counsel to execute an appropriate agreement.

Standard Contractual Clauses

[PLACEHOLDER] For transfers of personal data from the European Economic Area (EEA) to third countries, we will work with customers to implement appropriate transfer mechanisms, such as EU Standard Contractual Clauses (SCCs).

Subprocessors

See our Subprocessors page for the list of subprocessors used to deliver the platform.