Legal
Data processing agreement
How we act when we process personal data on your instructions.
The short version
- You are the controller of the personal data in your workspace; we are the processor and act only on your documented instructions.
- Our sub-processors — model providers and infrastructure — are named in the full text, and you are told before that list changes.
- We apply technical and organisational measures appropriate to the data, including encryption, workspace isolation and access logging.
- We notify you without undue delay of any personal data breach affecting your workspace, with what we know at the time.
A plain-language summary, provided for convenience. Where it differs from the full text below, the full text governs.
The full text
The full text of this document is being finalised with our counsel and will be published here. In the meantime, the summary above states our actual practice, and we will answer any question about it directly.
Najem AI produces analysis and drafts for internal use. It is not legal, tax, audit or investment advice and does not create a professional relationship.