C2Aiteams

Data Processing Addendum (DPA)

Aiteams ("Processor") processes Personal Data on behalf of the Customer ("Controller")
solely to provide C2 Governance Compliance Cloud.

1. Subject matter — compliance evidence automation.
2. Data — account email, org name, workflow metadata you submit, audit events.
3. Sub-processors — listed at /legal/sub-processors (includes Paddle for payments).
4. Retention — tenant data until deletion request or account closure.
5. DSAR — /legal/dsar.

This DPA is a template for the MVP; enterprise customers receive a countersigned version.