Back to home

Data Processing Agreement (DPA)

Last Updated: December 13, 2025

This Data Processing Agreement ("DPA") forms part of the Terms of Service between OMNEX™ and the Customer and applies to the processing of personal data in connection with the use of the OMNEX™ platform.

1. Roles of the Parties

For the purposes of applicable data protection laws:

  • The Customer acts as the Data Controller
  • OMNEX™ acts as the Data Processor

OMNEX™ processes personal data solely on documented instructions from the Customer and only for the purpose of providing the OMNEX™ services.

2. Scope of Processing

OMNEX™ may process personal data including, but not limited to:

  • User names and email addresses
  • Company and workspace identifiers
  • Messages, tasks, documents, and other content created by users
  • Authentication and security-related metadata

Processing activities include hosting, storage, access control, transmission, and technical support.

3. Confidentiality

OMNEX™ ensures that persons authorized to process personal data are subject to confidentiality obligations.

4. Security Measures

OMNEX™ implements appropriate technical and organizational measures to protect personal data, including:

  • Role-based access control
  • Database-level security policies
  • Encrypted connections
  • Logical separation of customer workspaces

5. Subprocessors

OMNEX™ may engage subprocessors (such as infrastructure or hosting providers) to deliver the service. OMNEX™ remains responsible for the performance of subprocessors in accordance with this DPA.

6. Data Subject Rights

OMNEX™ assists the Customer, where technically feasible, in fulfilling requests from data subjects to exercise their rights under applicable data protection laws.

7. Data Breach Notification

OMNEX™ will notify the Customer without undue delay after becoming aware of a personal data breach affecting Customer data.

8. Data Retention and Deletion

Personal data is retained only for the duration of the Customer's account.

Upon account deletion, personal data is deleted or anonymized in accordance with the OMNEX™ Privacy Policy, unless retention is required by law.

9. Audits

OMNEX™ will make available information reasonably necessary to demonstrate compliance with this DPA upon written request, subject to confidentiality and security considerations.

10. Liability

This DPA does not expand or limit liability beyond what is defined in the Terms of Service.

11. Governing Law

This DPA is governed by the same governing law as the OMNEX™ Terms of Service.