Data Processing Agreement (DPA)

1. Scope and Application

This Data Processing Agreement ("DPA") governs the processing of personal data by Aashray AI Labs ("Data Processor") on behalf of our enterprise clients ("Data Controller") in connection with the enterprise AI platforms, intelligent agents, and associated services (collectively, the "Services"). It forms an integral part of the Master Services Agreement (MSA) or Terms of Service applicable to the Services.

2. Processing of Personal Data

We process personal data solely on the documented instructions of the Data Controller, in compliance with the Digital Personal Data Protection Act (DPDPA) of India, the General Data Protection Regulation (GDPR), and other applicable global data privacy frameworks. We do not use Customer Data to train our foundational models (Zero-Training Guarantee).

3. Subprocessing

The Data Controller authorizes us to engage sub-processors (e.g., AWS, Azure, GCP) to deliver the Services. A full list of our current sub-processors is available upon request. We ensure all sub-processors are bound by written agreements that impose the same data protection obligations as set out in this DPA, including the execution of Standard Contractual Clauses (SCCs) where applicable.

4. Security Measures

We implement comprehensive technical and organizational measures to ensure a level of security appropriate to the risk, including AES-256 encryption at rest and TLS 1.3 encryption in transit. Our infrastructure features Role-Based Access Control (RBAC) and immutable audit logging.

5. Data Subject Rights & Incident Management

We will promptly notify the Data Controller of any personal data breaches without undue delay and assist in managing Data Subject Access Requests (DSARs). For DPA-related inquiries or to report an incident, contact our Data Protection Officer (DPO) at:

• Email: legal@aashrayailabs.com
• Location: Hyderabad, Telangana, India