This DPA governs the handling, storage, and processing of Client Data uploaded to the 1800 OS Deals platform.
The Processor uses industry-standard encryption, role-based access, and secured servers to protect Client Data. All data access is logged. Processor staff and contractors are bound by confidentiality obligations.
The Processor may use certified third-party providers for secure cloud hosting, AI enhancement, and analytics. These subprocessors meet recognized data protection and security standards. A list of subprocessors is available upon request.
Both parties agree to comply with applicable U.S. data privacy regulations. Data processed by the platform complies with the Electronic Signatures in Global and National Commerce Act (ESIGN), UETA, and other applicable laws.
In the event of a confirmed breach, the Processor will notify the Controller within 72 hours, providing all known details, impact, and mitigation steps.
Data is stored on secure U.S.-based cloud infrastructure.
This Agreement remains in effect for as long as the Controller uses the platform and for 63 months thereafter with respect to data retention or legal inquiries.