Data Processing Agreement

This page provides a summary of the QNSP Data Processing Agreement (DPA). The DPA governs how CUI Labs (Pte.) Ltd. processes personal data on your behalf as a data processor.

This DPA is designed to comply with Singapore's Personal Data Protection Act 2012 (PDPA), GDPR, and other applicable data protection laws.

Purpose

The DPA governs how QNSP processes personal data on your behalf.

Roles

• You: Data Controller
• QNSP: Data Processor

Our obligations

• Process data only per your instructions
• Implement security measures
• Assist with data subject requests
• Notify of data breaches
• Delete data on termination
• Allow audits

Security measures

• Encryption at rest and in transit
• Access controls
• Audit logging
• Incident response
• Regular security testing

Sub-processors

Current sub-processors:

• AWS (infrastructure)
• Stripe (payments)

Changes notified 30 days in advance.

Data transfers

For international transfers:

• Standard Contractual Clauses
• Data residency options
• Supplementary measures

Data subject rights

We assist with:

• Access requests
• Rectification
• Erasure
• Portability
• Restriction

Breach notification

• Notify within 48 hours
• Provide incident details
• Assist with notifications

Termination

On termination:

• Return or delete data
• Certify deletion
• 30-day export period

Governing Law

This DPA is governed by the laws of Singapore. For customers subject to GDPR, the Standard Contractual Clauses (SCCs) apply to data transfers.

Contact

CUI Labs (Pte.) Ltd.

Registered Office: 552 Ang Mo Kio, Avenue 10, #21-1982, Cheng San Place, Singapore 560552

UEN: 202532790K

DPA requests: contact@cuilabs.io

Full Terms of Service and Privacy Policy: https://qnsp.cuilabs.io/terms