Data Processing Agreement — Business Requests

Last updated 20 October 2026 · VantyrixTek

Status and applicability

This page describes the processing terms to arrange for business customers; it is not an executed DPA or a claim that every self-service subscription includes an Article 28 agreement. Before supplying data requiring a processor contract, contact bolt@omnibiofex.cloud to identify the legal parties, applicable law, processing instructions, authorized subprocessors and transfer safeguards, and obtain written acceptance.

Processing schedule to agree

Subject matter: AI workspace services. Duration: the agreed service term plus lawful retention and deletion arrangements. Operations: storing, organizing, retrieving and transmitting content for requested generation, review and downloads. Potential data: business-user identifiers, prompts, instructions and source-file content. Data subjects depend on customer inputs and may include staff, customers or contacts. Special-category data, children’s data and regulated records are excluded unless expressly agreed with suitable safeguards.

Processor obligations for the written agreement

The agreement should require processing only on documented lawful instructions, confidentiality for authorized personnel, proportionate technical and organizational security, authorized subprocessors with appropriate obligations, assistance with rights requests and applicable breach/impact-assessment duties, and return or deletion at termination subject to legal retention. It should address compliance information, proportionate audits, unlawful instructions and allocation of responsibilities.

International transfers and changes

Where required, the parties must agree a lawful transfer mechanism and complete its relevant annexes and assessments. Merely linking to standard clauses does not execute them. Changes to subprocessors, audit arrangements, notification channels and deletion schedules must be recorded in the signed agreement. European Commission processor-contract resources.

Customer obligations

The customer must establish a lawful basis, give required notices, limit content to authorized purposes and maintain appropriate human oversight. SHOUD’s independent account, billing and security purposes remain governed by the Privacy Policy. Do not treat a draft business-processing page as authorization to submit sensitive data.

Read these notices together with the Terms and Privacy Policy. Mandatory legal rights remain applicable. Questions: bolt@omnibiofex.cloud.