Legal
Data Processing Agreement
For organisations that need a processor agreement on file.
Last updated: Draft — pending legal review
This page summarises the DPA; it is not the agreement itself. The executable document is pending legal review and will be available to sign before launch. Request a copy at hello@numupro.com.
Roles
When you upload recordings containing personal data, you are the controller and NUMU PRO is the processor. We process that data only on your documented instructions — which, in practice, means producing the transcript you asked for.
What we commit to
- Processing only on your instructions, for the purpose of providing the service.
- Confidentiality obligations on everyone with access to the systems.
- Technical and organisational security measures appropriate to the risk.
- Assisting you with data subject requests and with breach notification.
- Deleting or returning data at the end of the agreement, at your choice.
- Processing within the EU, with no transfer outside the EEA without a lawful basis.
Sub-processors
We use a small number of infrastructure and payment sub-processors. A current list is provided with the agreement, and we notify you of changes so you can object.
No training on your data
The DPA states explicitly that customer content is never used to train or improve models. This is a contractual commitment, not a settings toggle.
Requesting the agreement
Write to hello@numupro.com with your entity name and we will send the document for signature.