DPA & GDPR Compliance

GDPR Compliance Statement

The General Data Protection Regulation (GDPR) is a comprehensive data protection law in the European Union (EU) that regulates the processing of personal data. Pravah AI is committed to GDPR compliance across all our services and interactions.

Data Processing Agreement (DPA)

We provide a standard Data Processing Agreement that covers our commitments as a Data Processor under GDPR. This agreement is designed to meet the requirements of Article 28 and ensures that your data is handled with the highest level of care.

To obtain a signed copy of our DPA, please contact our legal team.

Our Role as a Data Processor

In the context of the Services provided to you, our customer, you are the Data Controller (determining the purpose and means of processing) and Pravah AI is the Data Processor. We only process personal data based on your documented instructions.

International Data Transfers

We ensure that any international transfers of personal data (outside of the EEA) are protected by appropriate safeguards, such as Standard Contractual Clauses (SCCs) approved by the European Commission.

Technical and Organizational Measures

Pravah AI has implemented rigorous Technical and Organizational Measures (TOMs) to protect personal data, including:

• Pseudonymization and encryption of personal data.
• Ability to ensure the ongoing confidentiality, integrity, availability, and resilience of processing systems.
• Process for regularly testing, assessing, and evaluating the effectiveness of security measures.

Data Breach Notification

In the unlikely event of a personal data breach, Pravah AI will notify you without undue delay (within 48–72 hours) and provide all necessary information required for your reporting obligations.