Data Processing Agreement

1. Roles and scope

The business customer is the controller of personal data in conversations, bookings and contact records handled by their assistant. Sequel AI Ltd acts as processor.

Subject matter: operating the AI receptionist — answering calls/chats, transcripts, recordings, bookings, notifications. Duration: the life of the account plus retention configured by the controller.

Nature of processing: storage, transcription, summarisation, retrieval and deletion. Categories of data subjects: the controller's customers and prospective customers. Categories of data: contact details, call/chat content, booking details.

2. Processor obligations

Process data only on documented instructions from the controller (configuration choices are instructions, including retention settings).

Ensure persons with access are bound by confidentiality.

Implement appropriate technical and organisational measures: encryption in transit and at rest, tenant isolation, least-privilege access, audit logging.

Not engage sub-processors without general authorisation — our current list is at /subprocessors; we give notice of changes and you may object.

Assist the controller with data subject requests, breach notification (without undue delay), DPIAs and prior consultations as reasonably required.

At the end of service, delete or return controller data per the controller's choice, subject to legal retention requirements.

Make available information needed to demonstrate compliance and allow audits (reasonable scope, reasonable notice, reasonable frequency).

3. No training on your data

We do not use customer conversation content or contact data to train foundation or general-purpose models, and our AI sub-processors are contractually bound likewise.

4. International transfers

We prefer UK/EU processing where practical. Any transfer to third countries uses UK adequacy regulations, the UK-approved IDTA/Addendum, or equivalent safeguards.

5. Liability

Each party's liability under this DPA is subject to the limitations in the Terms of Use.

6. Signatures

This DPA is accepted electronically — use of the service for processing customer data constitutes acceptance. Download/print this page for your records.

Agentric is operated by Sequel AI Ltd, a company registered in England and Wales (company number 16897137), with registered office at 128 City Road, London, United Kingdom, EC1V 2NX.