Data Processing Agreement (DPA)

1. Definitions

Controller: The client engaging TechEvolvo's services

Processor: TechEvolvo Technologies Pvt Ltd

Personal Data: As defined in GDPR Article 4

2. Scope and Purpose

TechEvolvo processes personal data on behalf of the Controller for:

• Cloud infrastructure management
• DevOps implementation
• System monitoring and maintenance
• Technical support services

3. Processor Obligations

TechEvolvo shall:

• Process data only on documented instructions
• Ensure confidentiality of personnel
• Implement appropriate security measures
• Assist with data subject rights requests
• Delete or return data upon termination
• Maintain records of processing activities

4. Security Measures

• Encryption in transit and at rest
• Access controls and authentication
• Regular security assessments
• Incident response procedures
• Employee training on data protection

5. Sub-Processors

We may engage sub-processors (AWS, Azure, GCP). Controller will be notified of any changes with 30 days notice.

6. Data Breach Notification

We will notify Controller within 24 hours of becoming aware of any personal data breach.

7. International Transfers

Data may be transferred outside the EU using Standard Contractual Clauses or other approved mechanisms.

8. Audit Rights

Controller may audit our compliance with this DPA upon reasonable notice.

Contact

DPA inquiries: [email protected]