Data Processing Agreement

1. Roles

Aura AI Outreach is a product of Aura AI Agents L.L.C-FZ. For customer campaign data, the intended arrangement is that the customer determines the processing purposes and Aura acts on documented instructions. Account administration and billing may involve separate controller responsibilities. The applicable roles must be specified in the agreement for your use case.

2. Subprocessors

We maintain a current list of subprocessors on our Privacy Policy page. We'll give you 30 days' notice before engaging a new subprocessor.

3. Security

Our Security page describes current application controls. Any agreed security measures, access-review and credential-rotation requirements should be recorded in the executed agreement. This page does not promise an independently audited security programme or a fixed quarterly rotation cadence.

4. International transfers

A transfer mechanism must be established where applicable before the affected processing begins. Request the relevant provider locations and safeguards from us. Publication of this page does not execute EU Standard Contractual Clauses, a UK addendum or another transfer instrument.

5. Data subject requests

We'll assist you in fulfilling data subject requests (access, correction, deletion) within statutory deadlines.

6. Signing the DPA

To execute a counter-signed DPA, email support@auraaia.com with your company details. Confirm the processing scope, data categories, duration, approved subprocessors, security measures, rights-assistance, incident notification, audit arrangements, return/deletion and any transfer safeguards before relying on the agreement. This information page is not itself a counter-signed DPA. An existing executed agreement continues to govern its parties.