Legal

Data processing agreement

The agreement under which Noro LLC processes personal data on behalf of a client whose agents, knowledge and CRM records live in a Noro workspace.

1. 01Roles of the parties

   Will cover

   • Client as controller, Noro as processor
   • Where Noro acts as an independent controller

2. 02Subject matter, duration, nature and purpose

   Will cover

   • Categories of data subjects and personal data
   • Processing operations performed by agents and the platform

3. 03Processor obligations

   Will cover

   • Processing only on documented instructions
   • Confidentiality of personnel
   • Assistance with data-subject requests and assessments

4. 04Security measures

   Will cover

   • Tenant isolation, encryption of credentials, access control, logging
   • Backups and restoration

5. 05Sub-processors

   Will cover

   • Hosting and AI model providers
   • Notification and objection process

6. 06International transfers

   Will cover

   • Transfer mechanisms where applicable

7. 07Personal data breaches

   Will cover

   • Notification timelines and content

8. 08Deletion and return of data

   Will cover

   • At the end of the engagement
   • Retention required by law

9. 09Audit and information rights

   Will cover

   • Scope and frequency of audits