Data Processing Agreement (DPA)

Document status: working legal template. Before publication, fill in the details, verify the actual service architecture, and have the text reviewed by a lawyer practicing in the Republic of Uzbekistan.

Service owner: [LEGAL ENTITY NAME], TIN [TIN], address: [ADDRESS].
Service: Belgi.ai, [DOMAIN].
Version: [VERSION NUMBER] dated [DATE].
Contacts: [EMAIL], [PHONE].

The Customer instructs the Processor to process the data specified in the Annex only to provide [SERVICE] and under documented instructions. The Annex contains categories of subjects and data, operations, period, infrastructure location and sub-processors.

The Processor undertakes to ensure staff confidentiality, proportionate technical and organizational measures, access control, logging, backups, assistance with data subject requests and audits, and to notify the Customer of an incident without undue delay, no later than [PERIOD]. Engagement of a new sub-processor requires [PRIOR CONSENT/NOTICE] and equivalent obligations.

After services end, data are returned or deleted except for mandatory retention. The Customer may obtain control confirmations and conduct a proportionate audit while respecting the security of other clients. Cross-border transfer and storage location are allowed only under an agreed scheme and applicable law.