> For the complete documentation index, see [llms.txt](https://trust.memori.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://trust.memori.ai/en/legal-documents/dpa.md). # DPA The contract that defines how we process your data. The Data Processing Agreement (DPA) is the contractual document that governs, pursuant to Article 28 of Regulation (EU) 2016/679 (GDPR), the processing of personal data carried out by Memori s.r.l. as Data Processor on behalf of the Customer, who acts as Data Controller. The DPA is a mandatory document whenever a data controller entrusts personal data processing operations to a third party. In the case of AIsuru, this occurs when the Customer uses the platform to manage conversational Agents that interact with their own end users and process their data. ### What Memori's DPA contains Memori's DPA includes: * **Subject matter and duration of processing:** description of the processing activities carried out by Memori on behalf of the Customer * **Nature and purpose of processing:** data is processed exclusively to provide the contracted service; no use for Memori's own purposes * **Type of personal data and categories of data subjects:** data of the Agents' end users (conversations, profile data if authenticated, known facts if Deep Thought is active) * **Controller's obligations and rights:** instructions the Customer may give to Memori * **Technical and organizational measures:** the security measures implemented by Memori to protect data * **Sub-processors:** list of third parties (cloud providers, LLMs, etc.) used by Memori and conditions for their use * **Data breach management:** procedures for notifying the Controller in case of a data breach * **Data subjects' rights:** how Memori supports the Customer in the exercise of data subjects' rights * **Deletion and return of data:** procedures at the end of the contract ### How to request the DPA The DPA is not published directly in the Trust Center as it is a bilateral contractual document. It is available on request. To receive the DPA template, write to stating: * Company name and VAT number of the organization * Delivery model used (SaaS, PaaS, etc.) * Legal contact or DPO of the organization {% hint style="warning" %} For PaaS, Private Cloud and On-Premise models, the DPA is an integral part of the commercial contract and is signed together with the main agreement. {% endhint %}

Request DPA