Legal
Data Processing Agreement
Last updated 15 October 2026.
[Draft structure — have this page reviewed by counsel before launch.]
Scope
This DPA applies when Optimml processes personal data on behalf of a customer through Connect, ReportVault, AutoCruise or managed services.
Instructions
We process customer personal data only on documented instructions from the customer.
Security
Encryption in transit and at rest, role-based access, logging and staff confidentiality obligations.
Sub-processors
[List hosting, email, analytics and AI model providers with their locations].
Breach notification
We notify customers without undue delay, and within [72] hours, of a personal data breach.
Deletion
On termination we delete or return customer data within [30] days.
Signed copy
Email legal@optimml.com [confirm] for a countersigned PDF.