Capalsan
Data Processing Agreement — review draft
Contract review required
A binding DPA must identify the controller, processor, processing purposes, data categories, subprocessors and international transfer safeguards. This page is an outline, not a signed agreement.
Workspace processing
The service stores account information, investment records and privately uploaded documents, and processes selected document passages through a configured AI service when requested.
Security and deletion
Organization access controls, private storage and activity records support operational security. Contractual retention periods, incident notification windows, audit rights and backup deletion commitments require written verification.