Legal
Data Processing Addendum
Last updated: April 23, 2026
This Data Processing Addendum (“DPA”) forms part of the agreement between UltisAI Ltd (“Processor”) and the customer (“Controller”) using UltisAI. It applies to personal data processed on behalf of the Controller.
1. Roles
The Controller determines the purpose and means of processing personal data about its customers. UltisAI acts as the Processor.
2. Scope of processing
We process call audio, transcripts, caller phone numbers, and other metadata necessary to answer calls, generate quotes, and send SMS. Duration: for the life of the account plus 30 days.
3. Subprocessors
We maintain a public list of subprocessors in our Privacy Policy. We'll notify you at least 15 days before adding or replacing a subprocessor; you may object in writing.
4. International transfers
Where personal data originates in the EEA or UK, transfers outside those regions are covered by the EU Standard Contractual Clauses (2021/914) and the UK Addendum, incorporated here by reference.
5. Security
We maintain technical and organizational measures appropriate to the risk, including TLS 1.2+ in transit, AES-256 at rest, role-based access, audit logging, and an incident response plan. Details on our security page.
6. Data subject requests
If a caller or customer contacts us directly about their data, we forward the request to the Controller. The Controller is responsible for responding within applicable legal timeframes.
7. Breach notification
We notify the Controller without undue delay, and in any event within 72 hours of becoming aware of a personal data breach affecting the Controller's data.
8. Return or deletion
On termination, the Controller may export data via the dashboard. Thirty days after cancellation, we delete or anonymize personal data except where retention is required by law.
9. Audits
We provide SOC-2 Type II reports (once available) and respond to reasonable written audit requests from enterprise customers once per year.
10. Contact
Data Protection contact: ericlu@ultisai.com