Legal
Data Processing Addendum
A2Zai · A2Z Agentic Solutions Ltd · Version 2026-10-29-overage · accompanies Terms 2026-10-29-overage
1. Roles
A2Z Agentic Solutions Ltd acts as the Data Processor under UK GDPR and processes that transcript only to run this desk. All data ingestion, model processing, and text inference occur strictly on our private sovereign UK nodes. Your proprietary data never leaves the UK jurisdiction and is never transmitted to third-party US cloud AI APIs. You retain 100% ownership as the Data Controller. A stored transcript copy is removed when that organisation next opens the desk, if that folder is older than 6 years, unless the organisation deletes the copy sooner. Nothing removes it on a timer while the desk is idle. Removing the copy does not remove the audit log or an exported SOP file. This is the company's operating position. It is not a solicitor's opinion and not a certificate of compliance.
2. Purpose & instructions
We process Customer personal data only to provide A2Zai (reading transcripts, generating SOPs the Customer has reviewed, security, audit, support, and billing) and in accordance with documented instructions in the Agreement, including these Terms and this DPA.
3. Location & training prohibition
Processing for inference occurs on a private computer in the United Kingdom. We may move that computer between local UK hardware and a private UK server with at least 7 days' notice. Customer content and prompts are not used to train a public model. Card payments use Stripe. Stripe does not run the transcript extraction. A2Z Agentic Solutions Ltd acts as the Data Processor under UK GDPR and processes that transcript only to run this desk. All data ingestion, model processing, and text inference occur strictly on our private sovereign UK nodes. Your proprietary data never leaves the UK jurisdiction and is never transmitted to third-party US cloud AI APIs. You retain 100% ownership as the Data Controller. A stored transcript copy is removed when that organisation next opens the desk, if that folder is older than 6 years, unless the organisation deletes the copy sooner. Nothing removes it on a timer while the desk is idle. Removing the copy does not remove the audit log or an exported SOP file.
4. Security measures
Appropriate technical and organisational measures include access controls, session idle timeouts, upload type/size limits, optional IP allowlisting, De-ID / Stay-on-Page where configured (extraction only; no free-form invention), hash-chained operator audit events, and encryption in transit to the Service. De-ID is pattern-based scrubbing, not a guarantee of full anonymisation.
5. Sub-processors & retention
Card payments are taken by Stripe. The card number is not stored in the transcript folder. A2Z Agentic Solutions Ltd acts as the Data Processor under UK GDPR and processes that transcript only to run this desk. All data ingestion, model processing, and text inference occur strictly on our private sovereign UK nodes. Your proprietary data never leaves the UK jurisdiction and is never transmitted to third-party US cloud AI APIs. You retain 100% ownership as the Data Controller. A stored transcript copy is removed when that organisation next opens the desk, if that folder is older than 6 years, unless the organisation deletes the copy sooner. Nothing removes it on a timer while the desk is idle. Removing the copy does not remove the audit log or an exported SOP file.
6. Assistance & deletion
A2Z Agentic Solutions Ltd acts as the Data Processor under UK GDPR and processes that transcript only to run this desk. All data ingestion, model processing, and text inference occur strictly on our private sovereign UK nodes. Your proprietary data never leaves the UK jurisdiction and is never transmitted to third-party US cloud AI APIs. You retain 100% ownership as the Data Controller. A stored transcript copy is removed when that organisation next opens the desk, if that folder is older than 6 years, unless the organisation deletes the copy sooner. Nothing removes it on a timer while the desk is idle. Removing the copy does not remove the audit log or an exported SOP file. On a verified written request a named administrator deletes the organisation's stored transcripts, SOP files and queued job content and suspends access. The audit log, billing records and configured encrypted backups are retained under our legal and audit obligations and are not selectively edited.