Data Processing Addendum (DPA)

Enterprise-grade data processing terms for customers

Last updated: 2026-01-24 Applies to: Pilot + SaaS + On-Prem (as applicable)
Note: This DPA is provided as a template for enterprise discussions and contracting. It does not constitute legal advice. If you require a signed version, contact us and we will provide a customer-specific DPA aligned with your deployment model.

1) Roles & scope

This Data Processing Addendum (“DPA”) governs the processing of Personal Data by QognyX on behalf of the Customer under the applicable agreement (the “Agreement”) and is incorporated by reference into that Agreement.

Controller / Processor

  • Customer acts as the Controller (or Business) for Customer Data.
  • QognyX acts as the Processor (or Service Provider) for Customer Data.

Customer Data

“Customer Data” means any data (including Personal Data) submitted to the Services by or on behalf of Customer, including documents, procedures, incident reports, and user prompts/responses.

Excluded: anonymized telemetry or aggregated product metrics (if collected).

2) Processing details

Category Description
Purpose Provide, secure, and improve the Services; generate outputs and deliverables requested by Customer users; support and troubleshooting.
Duration For the term of the Agreement and as needed for support and legal retention, subject to Customer configuration and deletion requests.
Data types Identifiers (name, email), usage data, documents and internal knowledge, incident reports, operational procedures, and outputs.
Data subjects Customer employees, contractors, and authorized users; other individuals included in Customer Data.

3) Security measures

Core commitments

  • Access controls and least privilege
  • Encryption in transit (TLS) and encryption at rest where applicable
  • Logging and monitoring for reliability and incident response
  • Segregation of customer environments where applicable

Customer responsibilities

  • Provide lawful instructions and permissions for uploaded data
  • Ensure users do not upload prohibited data unless contractually agreed
  • Configure retention, access, and environment settings appropriately

4) Subprocessors

QognyX may engage subprocessors to provide specific infrastructure or services (e.g., hosting, email delivery, support tools). Where required, QognyX will provide a list of subprocessors upon request and will remain responsible for their performance under this DPA.

Enterprise option: For sensitive deployments, QognyX can offer an On-Premise model or a dedicated environment with restricted subprocessors.

5) Data subject requests & assistance

Assistance

QognyX will assist Customer in responding to requests (access, deletion, correction) to the extent required by applicable law, taking into account the nature of processing and the information available to QognyX.

Contact

Email: [email protected]
Reference: DPA Request

6) Deletion & return of data

Upon termination of the Services, QognyX will delete or return Customer Data in accordance with the Agreement, subject to legal requirements and reasonable technical limitations (e.g., backups).

7) Precedence

If there is any conflict between this DPA and the Agreement regarding Personal Data processing, this DPA will prevail.

Privacy Terms Legal Notice Cookies Request a Signed DPA