Legal
Data Processing Addendum
How X2B AML Intel processes personal data on behalf of business customers. This is a working draft.
Roles
For workspace data, the customer is the controller and X2B AML Intel acts as processor, handling data on documented instructions. For our own operational and security data we act as controller.
Scope and instructions
We process personal data only to provide the service and as instructed in the agreement. We do not use customer workspace data to train models or for unrelated purposes.
Sub-processors
We engage infrastructure and data-source providers as sub-processors under equivalent obligations. A current list is available on request; material changes are notified so customers can object.
Security measures
Technical and organisational measures include encrypted transport, scoped access, and audit logging. The Security Policy describes the current posture; the DPA binds it contractually.
International transfers
Where data crosses borders, we rely on an appropriate transfer mechanism. Specific mechanisms and hosting regions are being finalised as part of legal review.
Assistance and deletion
We assist with data-subject requests and security-incident notification, and on termination we delete or return workspace data per the customer’s choice, subject to legal retention.
The DPA supplements our Terms of Service and Privacy Policy. To request a signed copy or the current sub-processor list, contact deals@x2b.io.