Data Processing Agreement
This DPA applies to Platform customers, where EdGeneAI processes personal data on your behalf. It does not apply to Skills, which run entirely on your own infrastructure.
1. Scope
Data Controller: The Platform Customer. Data Processor: EdGene Private Limited. This DPA applies only where EdGeneAI's hosted Agent Platform processes personal data on your behalf. Skills customers process their own data entirely on their own systems — EdGeneAI never receives it, so no processor relationship exists for that motion.
2. Nature and Purpose of Processing
| Category | Data types | Purpose |
|---|---|---|
| Account data | Name, email, role, company | Account management, authentication |
| Sequencing metadata | Sample labels, experiment metadata | Pipeline execution, report generation |
| Usage data | IP address, session data | Platform security, analytics |
Note on raw sequencing data: may constitute sensitive personal data if linked to identifiable individuals. The Customer is responsible for ensuring a lawful basis before upload.
3. EdGeneAI's Processor Obligations (Platform Only)
- Process Personal Data only on documented Customer instructions
- Bind all personnel with access to confidentiality obligations
- Implement technical/organisational security measures — see our Security page
- Not engage new sub-processors without prior notice
- Assist with Data Subject rights requests within 72 hours
- Delete or return Personal Data within 30 days of termination
4. Sub-processors (Platform)
| Sub-processor | Purpose |
|---|---|
| AWS / Google Cloud Platform | Cloud infrastructure, compute, storage |
| Stripe / Razorpay | Payment processing |
| Anthropic | AI interpretation layer (pipeline outputs only) |
5. International Transfers
For EU/EEA/UK customers, transfers outside the EEA/UK rely on Standard Contractual Clauses. For Indian customers, EdGeneAI complies with the Digital Personal Data Protection Act, 2023.
6. Breach Notification
EdGeneAI notifies affected Platform customers without undue delay, and no later than 72 hours after becoming aware of a confirmed breach.
7. Contact
Data Protection enquiries: privacy@edgeneai.com