Data Processing Agreement

Last updated: March 2026

This Data Processing Agreement (“DPA”) forms part of the agreement between you (“Controller”) and Sophie Datagen Ltd, trading as Syntiqa (“Processor”), Company Number 16157376, registered in England and Wales.

1. Scope and Purpose

This DPA applies to the processing of personal data by Syntiqa on behalf of the Controller in connection with the provision of CRM automation services.

2. Data Processing Details

Syntiqa processes CRM data including contact information, business communications, and deal-related data as instructed by the Controller to provide autonomous CRM management services.

3. Security Measures

Syntiqa implements appropriate technical and organisational measures including:

  • ISO 27001 certification
  • Data hosted on Google Cloud (EU — europe-west1)
  • Complete data isolation between tenants
  • Encryption in transit and at rest
  • Full audit trail for all CRM changes
  • CRM credentials managed via Google Cloud Secret Manager

4. Sub-processors

Syntiqa uses Google Cloud Platform as its primary infrastructure sub-processor. A complete list of sub-processors is available upon request.

5. Data Breach Notification

In the event of a personal data breach, Syntiqa shall notify the Controller without undue delay and in any event within 72 hours of becoming aware of the breach.

6. Data Subject Rights

Syntiqa shall assist the Controller in responding to data subject requests under GDPR, including requests for access, rectification, erasure, and data portability.

7. Contact

For any questions about this DPA, please contact Sophie Datagen Ltd at hello@syntiqa.ai.