Data Processing Agreement

**Introduction** This Data Processing Agreement ("DPA") forms part of the Terms and Conditions between you ("Controller") and Assist ERP ("Processor") and governs the processing of personal data in connection with our Platform services. This DPA ensures compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable privacy regulations.

**Definitions** For the purposes of this DPA: "Personal Data" means any information relating to an identified or identifiable natural person "Processing" means any operation performed on personal data "Controller" refers to you, the customer using our Platform "Processor" refers to Assist ERP and our platform services "Data Subject" means the individual whose personal data is being processed "Sub-processor" means any third party engaged by us to process personal data **Scope and Purpose** This DPA applies to all personal data processed by Assist ERP on your behalf through our Platform, includi…

All sub-processors are bound by data protection obligations equivalent to those in this DPA. **International Data Transfers** Personal data may be transferred to countries outside your jurisdiction.

We ensure appropriate safeguards are in place for such transfers: Standard Contractual Clauses approved by the European Commission Adequacy decisions where applicable Binding Corporate Rules for internal data transfers Additional safeguards as required by applicable law **Data Subject Rights** We will assist you in responding to data subject requests, including: Access: Providing copies of personal data Rectification: Correcting inaccurate personal data Erasure: Deleting personal data when legally required Restriction: Limiting processing of personal data Portability: Providing data in machine…

**Data Breach Notification** In the event of a personal data breach, we will: Notify you without undue delay (within 24 hours of discovery) Provide details of the nature and scope of the breach Describe measures taken to address the breach Recommend steps to mitigate potential adverse effects Assist with any required notifications to supervisory authorities **Audits and Compliance** We maintain appropriate documentation to demonstrate compliance with this DPA and applicable data protection laws.

Upon reasonable request and with appropriate notice, we will: Provide information about our data processing activities Submit to audits by you or your appointed auditor Contribute to compliance assessments and impact evaluations Provide certifications and audit reports as available **Data Return and Deletion** Upon termination of our services, we will: Provide you with 30 days to export your personal data Delete all personal data from our systems after the export period Confirm deletion in writing upon your request Ensure our sub-processors also delete the personal data We may retain personal…

**Liability and Indemnification** Each party acknowledges that it may be held liable for damages caused by its processing of personal data in violation of applicable data protection laws. The parties agree to cooperate in defending against and resolving any claims related to data protection compliance. **Amendments** This DPA may be amended to reflect changes in applicable data protection laws or our processing activities. We will notify you of any material changes at least 30 days in advance.

**Contact Information** For questions about this DPA or data protection matters, please contact our Data Protection Officer: Email: [email protected] Phone: (555) 123-4567 Mail: Assist ERP Data Protection Officer 123 Business Street Suite 100 Business City, BC 12345