Data Processing Addendum

This Data Processing Addendum ("DPA") forms part of the Master Services Agreement or Terms of Service between LanceIQ ("Processor") and the Customer ("Controller").

1. Scope and Roles

LanceIQ acts as a Data Processor with respect to Personal Data processed on behalf of the Customer. The Customer acts as the Data Controller.

2. Data Subject Rights

LanceIQ shall, to the extent legally permitted, promptly notify Customer if it receives a request from a Data Subject to exercise their rights (e.g., access, deletion). LanceIQ will assist Customers with these requests upon written instruction.

3. Subprocessors

Customer grants LanceIQ general authorization to engage Subprocessors. A current list of Subprocessors is maintained at lanceiq.com/subprocessors.

4. Security Measures

LanceIQ implements appropriate technical and organizational measures to protect Personal Data, as detailed in our Security Policy.

5. Data Transfers

Data may be processed in the United States and other locations where our Subprocessors operate. We ensure appropriate safeguards are in place for cross-border transfers.