Data processing agreement
When you run customer conversations on RoboDesk, you are the controller and we are the processor. The DPA is the document that says exactly what that means.
Why it exists
RoboDesk handles conversations between your organisation and your customers. That is personal data, and it remains yours. Under data protection law you are the controller and we act as a processor on your documented instructions. The data processing agreement records that relationship in writing: what we process, for what purpose, for how long, under what security measures, and what happens when the contract ends.
What it typically covers
- The categories of data and data subjects involved, and the purpose of processing.
- Security measures, and the confidentiality obligations on our personnel.
- Use of sub-processors and how changes to them are notified.
- International transfers and the safeguards applied, where relevant.
- Assistance with data subject requests, breach notification and audits.
- Retention, return and deletion of data at the end of the agreement.
How to get a copy
Email hello@robodesk.ai with DPA in the subject line, naming your organisation and the deployment model you are considering — cloud region or on-premise — since those affect which terms and which sub-processors apply to you.
If your legal team needs to work from its own template, send it over and we will review it.
Related
See Security & compliance for the technical and organisational measures, and Sub-processors for the current list of third parties.
Questions about any of this?
Write to hello@robodesk.ai and it will reach the right team.