ModelCopLLC ← Back to site
Legal · DPA

Data Processing Agreement

Draft — not legally reviewed, not bindingThis is a working template provided for transparency and to speed procurement. It has NOT been reviewed by counsel and is NOT a binding agreement. The controlling DPA is the one executed between the parties. Request the current version at legal@modelcop.ai.

How ModelCop processes personal data on behalf of customers, and the commitments that govern that processing.

1 · Roles

For personal data processed through the platform, the customer is the controller and ModelCop is the processor. ModelCop processes such data only on documented instructions from the customer.

2 · Scope & purpose of processing

ModelCop processes customer data solely to provide, secure, and support the platform as described in the subscription agreement, and for no other purpose. ModelCop does not sell personal data and does not use customer content to train foundation models.

3 · Sub-processors

ModelCop engages the sub-processors listed on our Sub-processors page, under contracts imposing data-protection obligations consistent with this DPA. Customers may request advance notice of changes.

4 · Security measures

ModelCop maintains the technical and organizational measures described on our Security page, including encryption in transit and at rest, tenant isolation enforced at the database engine, least-privilege access, audit logging, and validated disaster recovery.

5 · Personal-data breach notification

ModelCop will notify the customer without undue delay after becoming aware of a personal-data breach affecting customer data, and will provide information reasonably needed for the customer to meet its own notification obligations.

6 · Assistance with data-subject rights

Taking into account the nature of processing, ModelCop will assist the customer in responding to data-subject requests (access, correction, deletion, portability, objection) through appropriate technical and organizational measures, including per-tenant export and deletion.

7 · International transfers

ModelCop processes customer data in the United States. Where required, transfers rely on appropriate safeguards (e.g., Standard Contractual Clauses) to be specified in the executed DPA.

8 · Return & deletion

On termination, ModelCop will, at the customer's choice, return or delete customer personal data within the period specified in the agreement, except where retention is required by law.

9 · Audit

ModelCop will make available information reasonably necessary to demonstrate compliance with this DPA, subject to confidentiality, and will accommodate audits as specified in the executed agreement.

Contact

legal@modelcop.ai · ModelCop LLC, Dallas, Texas.