Data processing agreement.

This document will set out the terms under which Record of Intent processes personal data on behalf of customers, including sub-processors, security measures, and breach notification timelines. The final version will be reviewed by a solicitor before public launch.

1. Parties and roles.

2. Subject-matter and duration of processing.

3. Nature and purpose of processing.

4. Categories of personal data.

5. Categories of data subjects.

6. Sub-processors.

7. International transfers and safeguards.

8. Security measures.

9. Data subject rights.

10. Personal data breach notification.

11. Audits and inspections.

12. Return or deletion of data.