Data processing agreement
Draft placeholder. This page is not legal advice and must be reviewed by counsel before launch.
For clinics, Sulaia acts as a data processor for the patient personal data you control. This DPA will set out the terms of that processing. The final text will be published before launch.
Roles
The clinic is the data controller; Sulaia is the processor acting on documented instructions.
Security measures
Technical and organisational measures, including tenant data isolation, access controls, and audit logging, will be described here.
Sub-processors
A current list of sub-processors and the notification process for changes will be maintained here.
Contact
Add the data-protection contact here.