Zero Training on Customer Data
Dotnitron never uses customer confidential files, transaction workpapers, prompts, or completions to train, retrain, or improve foundation models.
Enterprise Legal Terms
Data Processing Addendum (DPA)
Our standard Data Processing Addendum establishes legally binding safeguards for personal data, cross-border transfers under GDPR and the India DPDP Act, and technical security controls.
Download Standard DPA Template
Institutional procurement teams can download our pre-formatted DPA template in plain-text.
1. Purpose & Regulatory Alignment
When delivering enterprise AI products and engineering services, Dotnitron Technologies Private Limited acts as a Data Processor (or Data Processor under the India DPDP Act) on behalf of our enterprise clients, who remain the Data Controllers (Data Fiduciaries).
This DPA incorporates:
- GDPR Article 28: Statutory controller-to-processor processing terms for European and UK data protection laws.
- India DPDP Act 2023 (Section 8(2)): Valid contract governing data processing on behalf of a Data Fiduciary.
- Standard Contractual Clauses (EU SCCs): Commission Implementing Decision (EU) 2021/914 (Module 2 Controller-to-Processor and Module 3 Processor-to-Processor).
- UK International Data Transfer Addendum: Mandatory UK ICO addendum for data originated in the United Kingdom.
2. Core Data Protection Commitments
Flexible Deployment & Residency
Services can be deployed within client on-premise infrastructure, client VPC (BYOK/BYOA), or dedicated cloud regions selected by the client.
Rigorous Security Controls (TOMs)
AES-256 encryption at rest, TLS 1.3 in transit, strict RBAC, MFA on administrative systems, and continuous vulnerability management.
Prompt Breach Notification
Contractual commitment to notify clients without undue delay (and in any event within 48 hours) upon confirming any personal data incident.
3. Sub-processors & Notice Mechanism
All third-party sub-processors engaged by Dotnitron are documented in our public Sub-processors Directory. Clients receive at least 30 days prior written notice before any new sub-processor is added and may object on reasonable data protection grounds.
4. Executing a Custom DPA
If your organization requires a countersigned DPA with custom schedules or specific corporate entities, please contact our legal and compliance team:
Dotnitron Legal & Governance
Email: info@dotnitron.com
Dotnitron Technologies Private Limited · New Delhi, India