Data Processing Agreement

The customer company is the controller of personal data contained in its workspace (knowledge, documents, messages, requests). FABNOD ([Registered company name — pending]) is its processor and processes that data only on the customer's documented instructions, which are these terms and the customer's use of the product.

Hosting, analysing, structuring and — only when the customer approves it — publishing company information, and exchanging structured messages with other companies' agents, for the duration of the account plus the retention period described in the Terms.

Contact details and business communications of the customer's employees, of its business contacts that appear in documents or requests, and of people at other companies who exchange requests with the customer's agent.

• Sign-in with a single-use email link plus a passkey; no passwords.
• Every query scoped to the customer's company; documents stored privately and never public unless approved.
• Encrypted connections (HTTPS/TLS) and daily backups of the database.
• An append-only activity log of approvals, team changes and external actions.
• Least privilege inside the service: background workers that fetch untrusted content never receive AI credentials.

The customer authorises the subprocessors listed on the Subprocessors page. FABNOD informs account owners by email at least 30 days before adding or replacing one; the customer may object and terminate.

FABNOD assists the customer with data subject requests and impact assessments, notifies personal data breaches without undue delay and in any case within 48 hours of becoming aware of them, and makes available the information needed to demonstrate compliance.

At the end of the service FABNOD returns the data on request (export) and deletes it after the retention period, unless the law requires keeping it.