< Back to Policy Directory
Data Processing Agreement (DPA)
Last updated: July 31, 2026
This page summarises the baseline terms Ukweli AI applies when processing personal data on behalf of clients, partners, or other controllers under a contractual arrangement.
A full executed DPA may be provided separately as part of a service agreement, statement of work, or enterprise contract where required by law or customer policy.
1. Roles and Scope
Where Ukweli AI processes personal data solely on documented instructions from a client, the client acts as the controller and Ukweli AI acts as the processor, unless otherwise agreed in writing.
2. Processing Commitments
- We process personal data only for the agreed services and documented purposes.
- We implement appropriate technical and organisational measures to protect personal data.
- We ensure confidentiality obligations apply to staff and authorised personnel with access to personal data.
- We assist controllers in meeting applicable data protection obligations where required and reasonably possible.
3. Subprocessors
Where subprocessors are used to support delivery of our services, we evaluate them for security and compliance suitability and require contractual safeguards appropriate to the nature of the processing.
4. International Transfers
If personal data is transferred across borders, we use appropriate legal and contractual safeguards required under applicable data protection laws.
5. Return or Deletion of Data
At the end of the applicable services, and subject to legal obligations or agreed retention requirements, we will return, delete, or securely dispose of personal data in accordance with the governing contract.
Contact Us
If you require a signed DPA or want to discuss processor terms, please contact us through our Contact page.