Data Processing Agreement
Our commitment to processing your data securely and in compliance with applicable laws.
Effective: April 1, 2026 | Version 2.1
Agreement Overview
This Data Processing Agreement ("DPA") forms part of the Master Service Agreement between 1.ML ("Processor") and the Customer ("Controller") for the provision of machine learning platform services.
This DPA applies where 1.ML processes personal data on behalf of the Customer and reflects our commitment to data protection in accordance with GDPR, PIPL, CCPA, and other applicable data protection laws.
Key Provisions
Processing Scope
1.ML processes personal data only in accordance with documented instructions from the Customer, including training data, model inputs/outputs, and account information.
Security Measures
We implement appropriate technical and organizational measures including encryption at rest (AES-256) and in transit (TLS 1.3), access controls, and regular security audits.
Personnel
All personnel with access to personal data are bound by confidentiality obligations and receive regular data protection training.
Data Retention
Personal data is retained only for the duration necessary to provide services and deleted within 30 days of contract termination unless legally required otherwise.
Audit Rights
Customers have the right to audit our data processing practices. We provide SOC 2 Type II reports and support reasonable audit requests.
Authorized Sub-Processors
The following sub-processors are authorized to process personal data on behalf of 1.ML:
| Sub-Processor | Location | Purpose |
|---|---|---|
| Amazon Web Services | USA/EU | Cloud infrastructure and hosting |
| Google Cloud Platform | USA/EU | ML model training infrastructure |
| Stripe | USA | Payment processing |
| Cloudflare | Global | CDN and DDoS protection |
| Datadog | USA | Infrastructure monitoring |
| Intercom | USA | Customer support |
Customers will be notified 30 days before any new sub-processor is engaged.
Request Full DPA
Enterprise customers can request the complete Data Processing Agreement for review and execution.