This Data Processing Agreement (“DPA”) forms part of the agreement between you (“Controller”) and Sophie Datagen Ltd, trading as Syntiqa (“Processor”), Company Number 16157376, registered in England and Wales.
1. Scope and Purpose
This DPA applies to the processing of personal data by Syntiqa on behalf of the Controller in connection with the provision of CRM automation services.
2. Data Processing Details
Syntiqa processes CRM data including contact information, business communications, and deal-related data as instructed by the Controller to provide autonomous CRM management services.
3. Security Measures
Syntiqa implements appropriate technical and organisational measures including:
- ISO 27001 certification
- Data hosted in the European Union
- Complete data isolation between tenants
- Encryption in transit and at rest
- Full audit trail for all CRM changes
- CRM credentials kept in a dedicated secrets manager
4. Sub-processors
Syntiqa's primary infrastructure sub-processor is a cloud provider that hosts data in the European Union. A complete list of sub-processors is available upon request.
5. Data Breach Notification
In the event of a personal data breach, Syntiqa shall notify the Controller without undue delay and in any event within 48 hours of becoming aware of the breach.
6. Data Subject Rights
Syntiqa shall assist the Controller in responding to data subject requests under GDPR, including requests for access, rectification, erasure, and data portability.
7. Contact
For any questions about this DPA, please contact Sophie Datagen Ltd at hello@syntiqa.ai.