Data Processing Agreement

This page is currently under development.

Thank you for your interest in our Data Processing Agreement (DPA). We take data protection seriously, and rather than publish a generic, boilerplate DPA, we are taking the time to finalize a version that accurately reflects how AmueAI actually processes data — including our current hosting setup, authentication and waitlist infrastructure, underlying AI model providers, and the specific technical and organizational measures (TOMs) we have in place to protect personal data.

Why This Page Isn't Live Yet
A DPA is a binding legal document under Art. 28 GDPR, and its value depends entirely on accuracy — an outdated or generic sub-processor list, or a mismatch between what the document says and what our infrastructure actually does, would create more risk than it removes, both for you as our Customer and for us as the party providing the Service. We would rather take a short additional amount of time to get the details right than publish something prematurely and have to correct it later.

What Will Be Included
Once published, this DPA will cover, among other things: the subject matter, nature, and duration of processing carried out on your behalf; the categories of personal data and data subjects involved when your end users interact with your chatbot(s); a current and maintained list of sub-processors we rely on to deliver the Service, together with the applicable international transfer safeguards (such as the EU–U.S. Data Privacy Framework or Standard Contractual Clauses, where relevant); our technical and organizational security measures under Art. 32 GDPR; our processes for assisting you with data subject requests, security incidents, and data protection impact assessments; our data deletion and return procedures upon termination; and audit rights.

In the Meantime
If you are evaluating AmueAI for your business and require a signed DPA now — for example, to meet your own compliance obligations before onboarding personal data through the Service, or as part of your own vendor due diligence process — please don't hesitate to reach out to us directly. We are happy to provide a DPA on an individual basis in the interim while this page is being finalized, and to work with you on any specific data protection questions you may have about how AmueAI handles your data or your end users' data.

We appreciate your patience and are committed to publishing the finalized version here as soon as it is ready.