Draft terms. Each job is governed by the signed scope document; these terms are being finalised.
Data processing agreement
Roles (customer = controller, Fusion Minds = processor)
Scope of processing
Sub-processors (hosting provider in EU/India; no third-party AI services for customer data)
Security measures
Retention and deletion (N days after sign-off; N to be set)
Incident notification
Audit
GDPR and India DPDP clauses