{"id":3343,"date":"2025-03-05T14:51:28","date_gmt":"2025-03-05T14:51:28","guid":{"rendered":"https:\/\/autogenai.com\/uk\/?page_id=3343"},"modified":"2025-04-10T10:39:37","modified_gmt":"2025-04-10T10:39:37","slug":"uk-dpa","status":"publish","type":"page","link":"https:\/\/autogenai.com\/uk\/uk-dpa\/","title":{"rendered":"UK DPA"},"content":{"rendered":"\n<h1 class=\"wp-block-heading\">Customer Terms &amp; Conditions<\/h1>\n\n\n\n<p>Applicable to Order Forms signed on or after&nbsp;22 December 2024<\/p>\n\n\n\n<p><strong>AUTOGENAI DATA PROCESSING ADDENDUM<\/strong>&nbsp;<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>This Data Processing Addendum (\u201cDPA\u201d), and its schedules and annexes, forms part of the Agreement. Any terms used but not defined in this DPA will have the same meaning as set out in the Agreement.<br>\u00a0<\/li>\n\n\n\n<li>For the purposes of the Agreement and the delivery of the Services, the Customer is the data controller and AutogenAI is the data processor. Each party shall, in connection with the exercise of its rights and the performance of its obligations under the Agreement, comply with the Applicable Data Protection Laws. The type of personal data processed by AutogenAI under this Agreement and the duration and purpose of such processing is set forth in Annex A. In respect of its access to and\/or processing of any such personal data of Customer in the provision of the Services, AutogenAI shall:<br>a.\u00a0to protect Customer\u2019s personal data AutogenAI shall implement and maintain appropriate technical and organisational safeguards that are no less rigorous than accepted industry standards for information security and shall ensure that all such safeguards comply with Applicable Data Protection Laws. In assessing the appropriate level of security, AutogenAI shall take into account the risks that are presented by processing, in particular from accidental, unauthorised, or unlawful destruction, loss, alteration, damage, disclosure of, or access to Customer\u2019s personal data that is transmitted, stored, or otherwise processed by AutogenAI.b. preserve the integrity of such personal data of Customer and prevent the loss or corruption of such personal data; \u00a0<br>\u00a0<br>c. only process such personal data in accordance with the Agreement and any other written instructions and directions of Customer and not for its own purpose and ensure that anyone in its organisation processing personal data of Customer is subject to the same duties of confidence as set out in this DPA; \u00a0<br>\u00a0<br>d. notify Customer without undue delay if it becomes aware of any accidental, unauthorised or unlawful destruction, loss, alteration, or disclosure of, or access to Customer\u2019s personal data (a \u201cSecurity Incident\u201d) and provide sufficient detail of the Security Incident for Customer to take action to remedy the Security Incident to the extent required by Applicable Data Protection Laws;<br><br>e. notify Customer without undue delay if AutogenAI receives a request from a data subject regarding its personal data or to exercise a right under Applicable Data Protection Laws;f. provide such reasonable assistance and information to\u00a0 Customer as it may reasonably require to allow the Customer to comply with its obligations under the Applicable Data Protection Laws;<br><br>g.\u00a0upon termination of the Agreement at the direction of Customer either return such personal data to Customer or securely destroy such personal data and delete any copies, except where AutogenAI is required by applicable law to retain the personal data or copies of the personal data;\u00a0<br><br>h. where required under Applicable Data Protection Laws,\u00a0allow Customer and its auditors, at Customer\u2019s own cost and expense and upon reasonable prior written notice, to conduct audits or inspections during the Term and for 12 months thereafter, in connection with the processing of any such personal data to ensure any personal data processing by AutogenAI is in accordance with Applicable Data Protection Laws; \u00a0<br><br>i.\u00a0maintain complete and accurate records to demonstrate its compliance with this DPA; and\u00a0<br><br>j. not transmit any personal data of Customer or otherwise process it outside the European Economic Area, United Kingdom or Australia unless it has complied with its applicable obligations under Applicable Data Protection Laws including by ensuring adequate safeguards in relation to such transfer.<\/li>\n\n\n\n<li>Customer\u00a0authorises AutogenAI to engage other processors (referred to in this section as sub-processors) when processing Personal Data. Processor\u2019s existing sub-processors are listed in Annex A. In relation to the processing of Customer\u2019s personal data under the Agreement, AutogenAI has entered or (as the case may be) will enter with such third party sub-processors into a written agreement incorporating terms which are the same as or substantially similar to those set out in this DPA.\u00a0 As between Customer and AutogenAI, AutogenAI shall remain fully liable for all acts or omissions of any third party sub-processor appointed by AutogenAI pursuant to the Agreement and this DPA.<\/li>\n\n\n\n<li>Processor may appoint new sub-processors provided that they notify Controller in writing 14 days before the new sub-processor is granted access to Personal Data.<\/li>\n\n\n\n<li>Nothing in the Agreement shall relieve AutogenAI of its own direct responsibilities and liabilities under Applicable Data Protection Laws.<\/li>\n\n\n\n<li>For the purposes of this DPA the terms \u201cdata controller\u201d, \u201cdata processor\u201d, \u201cpersonal data\u201d, \u201cprocess\u201d \u201cprocessing\u201d and \u201cdata subject\u201d shall have the meaning set out in the Applicable Data Protection Laws and \u201csubprocessor\u201d means any third party appointed by or on behalf of AutogenAI to process Customer\u2019s personal data in connection with this Agreement. References to \u201cpersonal data\u201d include references to \u201cpersonal information\u201d under Applicable Data Protection Law.<\/li>\n<\/ol>\n\n\n\n<p><strong>Annex A<\/strong>&nbsp;<\/p>\n\n\n\n<p><strong>PARTICULARS OF PROCESSING<\/strong>&nbsp;<\/p>\n\n\n\n<p><strong>Scope<\/strong>&nbsp;<\/p>\n\n\n\n<p>AutogenAI will process the types of personal data listed below in order to provide its services to Customer.&nbsp;<\/p>\n\n\n\n<p><strong>Nature &amp; Purpose of processing<\/strong>&nbsp;<\/p>\n\n\n\n<p>In relation to Authorised users, to allow the following activities:&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>access to the Services\u00a0<\/li>\n\n\n\n<li>use of the Services\u00a0<\/li>\n\n\n\n<li>access and use\u00a0of the Support Services\u00a0<\/li>\n\n\n\n<li>training and development services\u00a0<\/li>\n\n\n\n<li>user administration\u00a0\u00a0<\/li>\n\n\n\n<li>usage reporting\u00a0to Customer<\/li>\n\n\n\n<li>provision of internet based searching<\/li>\n<\/ul>\n\n\n\n<p><strong>Duration of the processing<\/strong>&nbsp;<\/p>\n\n\n\n<p>For the duration of the Agreement.<\/p>\n\n\n\n<p><strong>Types of personal data<\/strong>&nbsp;<\/p>\n\n\n\n<p>For Authorised Users the following personal data is processed:&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Login details\u00a0<\/li>\n\n\n\n<li>System usage details\u00a0<\/li>\n\n\n\n<li>Employer details\u00a0<\/li>\n\n\n\n<li>Job title\u00a0\u00a0<\/li>\n\n\n\n<li>And any other personal data that Authorised Users input into the AutogenAI Application (which may include Special Categories of personal data)<\/li>\n<\/ul>\n\n\n\n<p><strong>Categories of data subject<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Authorised Users of the Customer<\/li>\n\n\n\n<li>Data subjects of any personal data uploaded by Authorised Users into the AutogenAI Application<\/li>\n<\/ul>\n\n\n\n<p><strong>Subprocessors<\/strong>&nbsp;**<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><strong>Name<\/strong><\/td><td><strong>Location of Processing&nbsp;&nbsp;&nbsp;&nbsp;<\/strong><\/td><td><strong>Purpose<\/strong><\/td><td><strong>Transfer mechanism relied upon (if applicable)<\/strong><\/td><\/tr><tr><td>AWS<\/td><td>UK<\/td><td>Hosting &amp; Infrastructure, LLM provider (for UK &amp; EU Customers only)<\/td><td>Not applicable (for London), adequacy decision for EU<\/td><\/tr><tr><td>AWS<\/td><td>US<\/td><td>Hosting &amp; Infrastructure, LLM provider (for US Customers only)<\/td><td>Not applicable<\/td><\/tr><tr><td>AWS<\/td><td>Australia<\/td><td>Hosting &amp; Infrastructure, LLM provider (for Australian Customers only)<\/td><td>Not applicable<\/td><\/tr><tr><td>AWS<\/td><td>Canada<\/td><td>Hosting &amp; Infrastructure, LLM provider (for Canadian Customers only)<\/td><td>Not applicable<\/td><\/tr><tr><td>Docebo<\/td><td>Italy<\/td><td>Learning Management Services<\/td><td>Adequacy decision for EU<\/td><\/tr><tr><td>OpenAI<\/td><td>US<\/td><td>LLM provider<\/td><td>UK Addendum to the SCCs and Transfer Impact Assessment (TIA)<\/td><\/tr><tr><td>Microsoft Azure<\/td><td>UK<\/td><td>Hosting and LLM provider (for UK &amp; EU Customers only)<\/td><td>Not applicable (for UK), adequacy decision for EU<\/td><\/tr><tr><td>Microsoft Azure<\/td><td>US<\/td><td>Hosting &amp; Infrastructure, LLM provider (for US Customers only)<\/td><td>Not applicable<\/td><\/tr><tr><td>Microsoft Azure<\/td><td>Australia<\/td><td>Hosting &amp; Infrastructure, LLM provider (for Australian Customers only)<\/td><td>Not applicable<\/td><\/tr><tr><td>Microsoft Azure<\/td><td>Canada<\/td><td>Hosting &amp; Infrastructure, LLM provider (for Canadian Customers only)<\/td><td>Not applicable<\/td><\/tr><tr><td>AutogenAI<\/td><td>US*<\/td><td>Subprocessor for UK &amp; Australia customers<\/td><td>UK Addendum and TIA<\/td><\/tr><tr><td>AutogenAI<\/td><td>UK<strong>*<\/strong><\/td><td>Subprocessor for US &amp; Australia customers<\/td><td>Not applicable<\/td><\/tr><tr><td>AutogenAI<\/td><td>Australia<strong>*<\/strong><\/td><td>Subprocessor for UK &amp; US<\/td><td>UK Addendum and TIA<\/td><\/tr><tr><td>Mistral<\/td><td>Sweden, EU<\/td><td>LLM Provider (for non-region-exclusive customers only)<\/td><td>Not applicable<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">* = Data Access and Regional Restrictions<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Regional Data Boundaries: Where clients have agreed terms specifying that their data must not leave a particular region (e.g., the UK), AutogenAI will ensure that such data remains stored and processed exclusively within the designated region.<\/li>\n\n\n\n<li>Access Restrictions: In such cases, only authorized staff located within the corresponding regional company (e.g., UK-based staff for UK data) will have access to the data. Staff from AutogenAI\u2019s associated companies in AUS and US would not access such data, ensuring compliance with regional data handling agreements.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">** =&nbsp;<strong>Changes to Data Processors and Third-Party Providers<\/strong><\/h3>\n\n\n\n<p>AutogenAI will notify affected customers in advance if it appoints new sub-processors or makes significant changes to existing ones, as required under this DPA<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Customer Terms &amp; Conditions Applicable to Order Forms signed on or after&nbsp;22 December 2024 AUTOGENAI DATA PROCESSING ADDENDUM&nbsp; Annex A&nbsp; PARTICULARS OF PROCESSING&nbsp; Scope&nbsp; AutogenAI will process the types of personal data listed below in order to provide its services to Customer.&nbsp; Nature &amp; Purpose of processing&nbsp; In relation to Authorised users, to allow the&#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"templates\/template-simple-text.php","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"class_list":["post-3343","page","type-page","status-publish","hentry"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.2 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>UK DPA - AutogenAI UK<\/title>\n<meta name=\"description\" content=\"Review AutogenAI UK\u2019s Data Processing Agreement outlining data handling, security, and GDPR compliance responsibilities.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/autogenai.com\/uk\/uk-dpa\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"UK DPA - AutogenAI UK\" \/>\n<meta property=\"og:description\" content=\"Review AutogenAI UK\u2019s Data Processing Agreement outlining data handling, security, and GDPR compliance responsibilities.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/autogenai.com\/uk\/uk-dpa\/\" \/>\n<meta property=\"og:site_name\" content=\"AutogenAI UK\" \/>\n<meta property=\"article:modified_time\" content=\"2025-04-10T10:39:37+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/autogenai.com\/uk\/wp-content\/uploads\/sites\/4\/2024\/10\/og-image-min.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/autogenai.com\/uk\/uk-dpa\/\",\"url\":\"https:\/\/autogenai.com\/uk\/uk-dpa\/\",\"name\":\"UK DPA - AutogenAI UK\",\"isPartOf\":{\"@id\":\"https:\/\/autogenai.com\/uk\/#website\"},\"datePublished\":\"2025-03-05T14:51:28+00:00\",\"dateModified\":\"2025-04-10T10:39:37+00:00\",\"description\":\"Review AutogenAI UK\u2019s Data Processing Agreement outlining data handling, security, and GDPR compliance responsibilities.\",\"breadcrumb\":{\"@id\":\"https:\/\/autogenai.com\/uk\/uk-dpa\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/autogenai.com\/uk\/uk-dpa\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/autogenai.com\/uk\/uk-dpa\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/autogenai.com\/uk\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"UK DPA\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/autogenai.com\/uk\/#website\",\"url\":\"https:\/\/autogenai.com\/uk\/\",\"name\":\"AutogenAI UK\",\"description\":\"Win more business\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/autogenai.com\/uk\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"UK DPA - AutogenAI UK","description":"Review AutogenAI UK\u2019s Data Processing Agreement outlining data handling, security, and GDPR compliance responsibilities.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/autogenai.com\/uk\/uk-dpa\/","og_locale":"en_US","og_type":"article","og_title":"UK DPA - AutogenAI UK","og_description":"Review AutogenAI UK\u2019s Data Processing Agreement outlining data handling, security, and GDPR compliance responsibilities.","og_url":"https:\/\/autogenai.com\/uk\/uk-dpa\/","og_site_name":"AutogenAI UK","article_modified_time":"2025-04-10T10:39:37+00:00","og_image":[{"width":1200,"height":630,"url":"https:\/\/autogenai.com\/uk\/wp-content\/uploads\/sites\/4\/2024\/10\/og-image-min.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/autogenai.com\/uk\/uk-dpa\/","url":"https:\/\/autogenai.com\/uk\/uk-dpa\/","name":"UK DPA - AutogenAI UK","isPartOf":{"@id":"https:\/\/autogenai.com\/uk\/#website"},"datePublished":"2025-03-05T14:51:28+00:00","dateModified":"2025-04-10T10:39:37+00:00","description":"Review AutogenAI UK\u2019s Data Processing Agreement outlining data handling, security, and GDPR compliance responsibilities.","breadcrumb":{"@id":"https:\/\/autogenai.com\/uk\/uk-dpa\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/autogenai.com\/uk\/uk-dpa\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/autogenai.com\/uk\/uk-dpa\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/autogenai.com\/uk\/"},{"@type":"ListItem","position":2,"name":"UK DPA"}]},{"@type":"WebSite","@id":"https:\/\/autogenai.com\/uk\/#website","url":"https:\/\/autogenai.com\/uk\/","name":"AutogenAI UK","description":"Win more business","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/autogenai.com\/uk\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/autogenai.com\/uk\/wp-json\/wp\/v2\/pages\/3343","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/autogenai.com\/uk\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/autogenai.com\/uk\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/autogenai.com\/uk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/autogenai.com\/uk\/wp-json\/wp\/v2\/comments?post=3343"}],"version-history":[{"count":1,"href":"https:\/\/autogenai.com\/uk\/wp-json\/wp\/v2\/pages\/3343\/revisions"}],"predecessor-version":[{"id":3344,"href":"https:\/\/autogenai.com\/uk\/wp-json\/wp\/v2\/pages\/3343\/revisions\/3344"}],"wp:attachment":[{"href":"https:\/\/autogenai.com\/uk\/wp-json\/wp\/v2\/media?parent=3343"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}