Data processing agreement
LAST UPDATED 2026-09-11
This agreement forms part of the terms of service where the GDPR or a comparable law applies to your use of Legalnaut. You are the controller; A2Z WEB PTE. LTD. is the processor.
1. Subject matter
Processing of personal data contained in documents you import into a workspace, for the purpose of providing the service, for as long as your subscription runs.
2. Categories of data and data subjects
Whatever your case material contains. In litigation that routinely includes names, contact details, employment details, financial information and correspondence, and may include special categories of data. Data subjects are the parties, witnesses and third parties appearing in your documents.
3. Our obligations
We process personal data only on your documented instructions, keep it confidential, apply the security measures described on the security page, assist you with data subject requests, and notify you without undue delay of any personal data breach affecting your material.
4. Sub-processors
You authorise the sub-processors listed in the privacy policy. We give notice before adding a new one, and you may object.
5. International transfers
Transfers outside the EEA are made under Standard Contractual Clauses. Executed processing agreements are in place with every model provider, each prohibiting the use of customer content for training.
6. Deletion and return
On termination you may export your material. We delete it on your written request. Nothing is deleted automatically.
7. Audit
We make available the information needed to demonstrate compliance, including our SOC 2 Type II report under NDA on request.