{"id":303,"date":"2026-05-02T17:47:28","date_gmt":"2026-05-02T22:47:28","guid":{"rendered":"https:\/\/flikt.ai\/legal\/dpa\/"},"modified":"2026-06-02T19:42:21","modified_gmt":"2026-06-03T00:42:21","slug":"dpa","status":"publish","type":"page","link":"https:\/\/flikt.ai\/es\/legal\/dpa\/","title":{"rendered":"Acuerdo de Procesamiento de Datos"},"content":{"rendered":"\n<h1 id=\"data-processing-agreement\">Data Processing Agreement<\/h1>\n<p><strong>Effective Date:<\/strong> [TO BE INSERTED ON EXECUTION] <strong>Last Updated:<\/strong> May 2, 2026 <strong>Version:<\/strong> 1.0<\/p>\n<p>This Data Processing Agreement (\u201c<strong>DPA<\/strong>\u201d) forms part of, and is incorporated into, the Terms of Service, Master Service Agreement, or other written agreement (the \u201c<strong>Principal Agreement<\/strong>\u201d) between <strong>Flikt.AI<\/strong> (\u201c<strong>Flikt.AI<\/strong>,\u201d \u201c<strong>we<\/strong>,\u201d \u201c<strong>us<\/strong>,\u201d or \u201c<strong>Processor<\/strong>\u201d) and the customer identified in the Principal Agreement (\u201c<strong>Customer<\/strong>\u201d or \u201c<strong>Controller<\/strong>\u201d). This DPA governs the processing of Personal Data by Flikt.AI on behalf of Customer.<\/p>\n<p>In the event of any conflict between this DPA and the Principal Agreement, this DPA controls with respect to the processing of Personal Data.<\/p>\n<blockquote>\n<p><strong>How to execute this DPA.<\/strong> No signature is required. Customer\u2019s continued use of the Flikt.AI platform after the Effective Date of the most recent version of this DPA constitutes acceptance. Customers who require a counter-signed copy may email <strong>legal@flikt.ai<\/strong> to request one.<\/p>\n<\/blockquote>\n<hr \/>\n<h2 id=\"table-of-contents\">Table of Contents<\/h2>\n<ol type=\"1\">\n<li>Definitions<\/li>\n<li>Processing of Personal Data<\/li>\n<li>Sub-processors<\/li>\n<li>Security Measures<\/li>\n<li>International Data Transfers<\/li>\n<li>Data Subject Rights<\/li>\n<li>Security Incidents<\/li>\n<li>Audits<\/li>\n<li>Data Retention<\/li>\n<li>Confidentiality<\/li>\n<li>Data Return and Deletion<\/li>\n<li>Liability<\/li>\n<li>General<\/li>\n<\/ol>\n<p>Annex I \u2014 Description of Transfer Annex II \u2014 Technical and Organizational Measures Annex III \u2014 Sub-processors<\/p>\n<hr \/>\n<h2 id=\"definitions\">1. Definitions<\/h2>\n<p><strong>1.1.<\/strong> Capitalized terms not defined in this DPA have the meanings given to them in the Principal Agreement, in the GDPR, or in applicable Data Protection Laws.<\/p>\n<p><strong>1.2.<\/strong> For purposes of this DPA:<\/p>\n<ul>\n<li>\u201c<strong>Controller<\/strong>\u201d means the entity that, alone or jointly with others, determines the purposes and means of the Processing of Personal Data.<\/li>\n<li>\u201c<strong>Processor<\/strong>\u201d means an entity that Processes Personal Data on behalf of the Controller.<\/li>\n<li>\u201c<strong>Sub-processor<\/strong>\u201d means any third party engaged by Flikt.AI to Process Personal Data on Customer\u2019s behalf.<\/li>\n<li>\u201c<strong>Personal Data<\/strong>\u201d has the meaning given in Article 4(1) GDPR and includes any analogous defined term under Data Protection Laws (e.g., \u201cpersonal information\u201d under CCPA\/CPRA).<\/li>\n<li>\u201c<strong>Process<\/strong>\u201d or \u201c<strong>Processing<\/strong>\u201d has the meaning given in Article 4(2) GDPR.<\/li>\n<li>\u201c<strong>Data Protection Laws<\/strong>\u201d means all laws and regulations applicable to the Processing of Personal Data under this DPA, including the EU GDPR, the UK GDPR, the Swiss Federal Act on Data Protection (FADP), the California Consumer Privacy Act as amended by the California Privacy Rights Act (\u201c<strong>CCPA\/CPRA<\/strong>\u201d), and any other applicable U.S. state privacy laws (Virginia, Colorado, Connecticut, Utah, Texas, Florida, etc.).<\/li>\n<li>\u201c<strong>Standard Contractual Clauses<\/strong>\u201d or \u201c<strong>SCCs<\/strong>\u201d means the standard contractual clauses for the transfer of personal data to third countries adopted by the European Commission Decision (EU) 2021\/914 of June 4, 2021, Module Two (Controller to Processor).<\/li>\n<li>\u201c<strong>UK Addendum<\/strong>\u201d means the International Data Transfer Addendum to the EU SCCs issued by the UK Information Commissioner\u2019s Office, version B1.0, in force March 21, 2022.<\/li>\n<li>\u201c<strong>Customer Data<\/strong>\u201d means data \u2014 including Personal Data \u2014 that Customer or its end users upload to or generate within the Flikt.AI platform.<\/li>\n<li>\u201c<strong>Security Incident<\/strong>\u201d means a confirmed breach of Flikt.AI\u2019s security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, Personal Data Processed by Flikt.AI on behalf of Customer.<\/li>\n<\/ul>\n<hr \/>\n<h2 id=\"processing-of-personal-data\">2. Processing of Personal Data<\/h2>\n<h3 id=\"roles-and-scope\">2.1. Roles and Scope<\/h3>\n<p>Customer is the Controller of Customer Data (or, where Customer is itself a Processor for its own end customers, Customer is the Processor and Flikt.AI is its Sub-processor). Flikt.AI Processes Personal Data only as a Processor acting on Customer\u2019s documented instructions.<\/p>\n<h3 id=\"subject-matter-and-duration\">2.2. Subject Matter and Duration<\/h3>\n<p><strong>Subject matter:<\/strong> Flikt.AI\u2019s Processing of Personal Data contained in construction documents (PDF plan sets, specifications, schedules, RFIs, and related project artifacts) for the purpose of providing AI-assisted conflict-detection analysis and generating conflict reports.<\/p>\n<p><strong>Duration:<\/strong> From the Effective Date of the Principal Agreement until termination or expiration of the Principal Agreement, plus the post-termination periods set forth in Sections 9 (Data Retention) and 11 (Data Return and Deletion).<\/p>\n<h3 id=\"nature-and-purpose-of-processing\">2.3. Nature and Purpose of Processing<\/h3>\n<p>Flikt.AI Processes Customer Data to:<\/p>\n<ol type=\"a\">\n<li>ingest and render PDF plan sets;<\/li>\n<li>extract elements from plans using a combination of text extraction and AI-assisted vision analysis;<\/li>\n<li>cross-reference elements across architectural, structural, mechanical, electrical, plumbing, fire, civil, landscape, and interior-design disciplines;<\/li>\n<li>produce conflict reports including severity classifications, location citations, and cost-impact estimates;<\/li>\n<li>deliver reports to Customer via the Flikt.AI portal and (with Customer\u2019s consent) email; and<\/li>\n<li>provide ongoing platform operation, support, debugging, and security monitoring.<\/li>\n\n      <li><strong>Improving Flikt.AI&#8217;s conflict-detection capability<\/strong> through prompt tuning, expansion of Flikt.AI&#8217;s internal reference library of construction patterns and conflict types, and benchmarking of detection accuracy on real plan sets. Customer Data is not shared with any third party (including any AI model provider) for this internal-improvement purpose.<\/li>\n    <\/ol>\n<h3 id=\"categories-of-data-subjects\">2.4. Categories of Data Subjects<\/h3>\n<p>The Personal Data Processed concerns the following categories of data subjects, as they appear within Customer-uploaded documents:<\/p>\n<ul>\n<li>Architects, engineers, and licensed design professionals (names, license numbers, professional stamps, signatures, contact information appearing on plan title blocks);<\/li>\n<li>Property owners and developers (names, organizational affiliations, addresses);<\/li>\n<li>General contractors, subcontractors, consultants, and other project participants whose names appear on plans;<\/li>\n<li>Tenants in retail, multifamily, or commercial fit-out plans whose identifying information appears in tenant criteria documents;<\/li>\n<li>Customer\u2019s own employees and authorized users of the Flikt.AI platform.<\/li>\n<\/ul>\n<h3 id=\"types-of-personal-data-processed\">2.5. Types of Personal Data Processed<\/h3>\n<ul>\n<li>Names, business contact information, and professional license numbers<\/li>\n<li>Property addresses, project identifiers, and unit numbers<\/li>\n<li>Authentication and account data for Customer\u2019s authorized users (email, hashed credentials managed by sub-processor, IP address, device metadata)<\/li>\n<li>Communication metadata (timestamps, sender\/recipient of report-ready emails)<\/li>\n<li>Usage data (login times, API calls, feature usage)<\/li>\n<\/ul>\n<p>Flikt.AI does not intentionally Process special categories of Personal Data (Article 9 GDPR). If Customer\u2019s plan sets contain special-category data (e.g., health-care occupancy plans referencing patient capacity), Customer is responsible for assessing the lawful basis for such Processing and notifying Flikt.AI before upload.<\/p>\n<h3 id=\"customer-instructions\">2.6. Customer Instructions<\/h3>\n<p>The Principal Agreement and this DPA constitute Customer\u2019s complete and final documented Processing instructions. Customer may issue additional instructions in writing (email to <strong>legal@flikt.ai<\/strong> suffices). Flikt.AI will inform Customer if it believes an instruction violates Data Protection Laws.<\/p>\n<hr \/>\n<h2 id=\"sub-processors\">3. Sub-processors<\/h2>\n<h3 id=\"general-authorization\">3.1. General Authorization<\/h3>\n<p>Customer grants Flikt.AI a general authorization to engage Sub-processors, subject to the terms of this Section 3.<\/p>\n<h3 id=\"current-sub-processor-list\">3.2. Current Sub-processor List<\/h3>\n<p>The current list of Sub-processors is included in <strong>Annex III<\/strong> to this DPA and is also published at <code>flikt.ai\/legal\/sub-processors<\/code> (or such other URL as Flikt.AI may designate). The list includes the Sub-processor\u2019s name, role, and the location of Processing.<\/p>\n<h3 id=\"notification-of-changes\">3.3. Notification of Changes<\/h3>\n<p>Flikt.AI will provide at least <strong>30 days\u2019 advance notice<\/strong> of new or replacement Sub-processors by updating the published Sub-processor list and notifying Customers who have subscribed to sub-processor change notifications. To subscribe, Customer may email <strong>legal@flikt.ai<\/strong>.<\/p>\n<h3 id=\"right-to-object\">3.4. Right to Object<\/h3>\n<p>If Customer reasonably objects to a new Sub-processor on data-protection grounds within 15 days of notification, Flikt.AI will use reasonable efforts to make available a commercially reasonable change to the platform that avoids Processing of Personal Data by the objected-to Sub-processor. If no such change is feasible, Customer may terminate the affected portion of the Principal Agreement upon written notice to Flikt.AI.<\/p>\n<h3 id=\"sub-processor-obligations\">3.5. Sub-processor Obligations<\/h3>\n<p>Flikt.AI will impose data-protection terms on each Sub-processor that are no less protective than those in this DPA. Flikt.AI remains liable to Customer for any breach by a Sub-processor of those obligations.<\/p>\n<hr \/>\n<h2 id=\"security-measures\">4. Security Measures<\/h2>\n<p>Flikt.AI implements and maintains appropriate technical and organizational measures (TOMs) to protect Personal Data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. The current TOMs are described in <strong>Annex II<\/strong> and include:<\/p>\n<ul>\n<li>Encryption of Customer Data at rest using AES-256 and in transit using TLS 1.2 or higher<\/li>\n<li>Tenant logical isolation at the application and database layer<\/li>\n<li>Role-based access controls and least-privilege provisioning for Flikt.AI personnel<\/li>\n<li>Authentication using a third-party identity provider with RS256-signed JWT session tokens<\/li>\n<li>Continuous infrastructure monitoring and intrusion detection<\/li>\n<li>Daily encrypted backups with point-in-time recovery<\/li>\n<li>Documented secure software development lifecycle, including code review and dependency-vulnerability scanning<\/li>\n<li>Personnel confidentiality undertakings and security training<\/li>\n<\/ul>\n<p>Flikt.AI may update its TOMs from time to time, provided that the level of protection is not materially decreased.<\/p>\n<hr \/>\n<h2 id=\"international-data-transfers\">5. International Data Transfers<\/h2>\n<h3 id=\"transfer-mechanism\">5.1. Transfer Mechanism<\/h3>\n<p>To the extent that Flikt.AI\u2019s Processing involves transfers of Personal Data from the European Economic Area, the United Kingdom, or Switzerland to a country not covered by an adequacy decision, the parties agree that the Standard Contractual Clauses, with the modules and clauses indicated below, are incorporated by reference into this DPA and apply to such transfers:<\/p>\n<ul>\n<li><strong>EU\/EEA transfers:<\/strong> SCCs Module Two (Controller to Processor), in the form approved by Commission Implementing Decision (EU) 2021\/914.<\/li>\n<li><strong>UK transfers:<\/strong> SCCs as above, supplemented by the UK Addendum (B1.0).<\/li>\n<li><strong>Swiss transfers:<\/strong> SCCs as above, with references to \u201cGDPR\u201d and \u201cEU Member State law\u201d interpreted as references to the Swiss FADP and Swiss law respectively, and with the Swiss Federal Data Protection and Information Commissioner (FDPIC) treated as the supervisory authority.<\/li>\n<\/ul>\n<h3 id=\"scc-selections\">5.2. SCC Selections<\/h3>\n<p>For purposes of the SCCs:<\/p>\n<ul>\n<li><strong>Module Two<\/strong> (Controller to Processor) applies. (If Customer is itself a Processor and Flikt.AI is its Sub-processor, <strong>Module Three<\/strong> applies.)<\/li>\n<li><strong>Clause 7<\/strong> (Docking Clause): not used.<\/li>\n<li><strong>Clause 9(a) (Sub-processors):<\/strong> Option 2 (general written authorization), with the 30-day notification period set in Section 3.3 of this DPA.<\/li>\n<li><strong>Clause 11(a)<\/strong> (Independent Dispute Resolution by data subjects): the optional language is not adopted.<\/li>\n<li><strong>Clause 17<\/strong> (Governing Law): the laws of Ireland, unless local mandatory law requires otherwise.<\/li>\n<li><strong>Clause 18<\/strong> (Forum and Jurisdiction): Ireland.<\/li>\n<li><strong>Annex I.A (Parties), Annex I.B (Description of Transfer), Annex II (Technical and Organizational Measures), Annex III (Sub-processors)<\/strong> are completed by reference to Annexes I, II, and III of this DPA.<\/li>\n<\/ul>\n<h3 id=\"transfer-impact-assessment\">5.3. Transfer Impact Assessment<\/h3>\n<p>On request, Flikt.AI will provide the information reasonably necessary to assist Customer with a transfer impact assessment, including details about Sub-processor locations, data flows, and applicable law-enforcement disclosure regimes.<\/p>\n<hr \/>\n<h2 id=\"data-subject-rights\">6. Data Subject Rights<\/h2>\n<p>Flikt.AI will assist Customer in responding to data subject rights requests as required by Article 28(3)(e) GDPR and analogous Data Protection Laws. If Flikt.AI receives a request directly from a data subject identifying Customer, it will redirect the data subject to Customer without undue delay. Where the Flikt.AI platform provides self-service tools (export, correction, deletion), Customer uses those tools to respond.<\/p>\n<hr \/>\n<h2 id=\"security-incidents\">7. Security Incidents<\/h2>\n<p>Flikt.AI will notify Customer without undue delay, and in any event within <strong>72 hours<\/strong> of becoming aware, of any Security Incident affecting Customer\u2019s Personal Data. Notice will be sent to the email address on file in Customer\u2019s account and will include the information required by Article 33(3) GDPR to the extent then known. Flikt.AI will cooperate in good faith with Customer\u2019s investigation and any required notifications to supervisory authorities or data subjects. Notification is not an admission of fault or liability.<\/p>\n<hr \/>\n<h2 id=\"audits\">8. Audits<\/h2>\n<p>Customer may exercise its audit rights under Article 28(3)(h) GDPR and Clause 8.9 of the SCCs. On reasonable written request (no more than once per twelve-month period, except after a confirmed Security Incident or as required by a supervisory authority), Flikt.AI will provide a summary of TOMs (Annex II), any third-party audit reports or certifications it then holds, and responses to a reasonable security questionnaire (SIG-Lite, CAIQ-Lite, or equivalent). If documentation is insufficient, Customer may commission a qualified third-party auditor on 30 days\u2019 written notice and at Customer\u2019s expense, subject to Flikt.AI\u2019s reasonable approval and the protection of other customers\u2019 confidentiality. All audit information is Flikt.AI\u2019s Confidential Information.<\/p>\n<hr \/>\n<h2 id=\"data-retention\">9. Data Retention<\/h2>\n<p>Flikt.AI retains Customer Data only for the periods necessary to provide the platform, comply with legal obligations, resolve disputes, and enforce agreements. The detailed retention schedule appears in the Privacy Policy (Section 5). Personal Data within Customer Data is retained for the same periods unless Customer instructs otherwise.<\/p>\n<hr \/>\n<h2 id=\"confidentiality\">10. Confidentiality<\/h2>\n<p>Flikt.AI ensures that any personnel authorized to Process Personal Data are bound by appropriate confidentiality obligations.<\/p>\n<hr \/>\n<h2 id=\"data-return-and-deletion\">11. Data Return and Deletion<\/h2>\n<p>Upon termination or expiration of the Principal Agreement, and at Customer\u2019s election, Flikt.AI will:<\/p>\n<ol type=\"a\">\n<li>return all Customer Data to Customer in a structured, commonly used, machine-readable format; or<\/li>\n<li>delete all Customer Data from production systems.<\/li>\n<\/ol>\n<p>Customer\u2019s election must be communicated in writing within <strong>30 days<\/strong> of termination. Absent such election, Flikt.AI will delete Customer Data within 60 days of termination. Backups containing Customer Data are deleted in accordance with Flikt.AI\u2019s documented backup-retention schedule (currently 35 days from the date of backup creation), after which point they are unrecoverable.<\/p>\n<hr \/>\n<h2 id=\"liability\">12. Liability<\/h2>\n<p>Each party\u2019s liability arising out of or related to this DPA \u2014 whether in contract, tort, or under any other theory of liability \u2014 is subject to the limitations and exclusions set forth in the Principal Agreement.<\/p>\n<hr \/>\n<h2 id=\"general\">13. General<\/h2>\n<p><strong>13.1. Order of Precedence.<\/strong> This DPA prevails over the Principal Agreement to the extent of any conflict relating to the Processing of Personal Data.<\/p>\n<p><strong>13.2. Severability.<\/strong> If any provision of this DPA is held unenforceable, the remaining provisions remain in full force.<\/p>\n<p><strong>13.3. Modifications.<\/strong> Flikt.AI may update this DPA from time to time; the version published at <code>flikt.ai\/legal\/dpa\/<\/code> controls. Material changes will be communicated to Customers in advance.<\/p>\n<p><strong>13.4. Contact.<\/strong> Questions regarding this DPA may be sent to <strong>legal@flikt.ai<\/strong>.<\/p>\n<hr \/>\n<h1 id=\"annex-i-description-of-transfer\">Annex I \u2014 Description of Transfer<\/h1>\n<p><strong>A. Parties<\/strong><\/p>\n<ul>\n<li><strong>Data Exporter:<\/strong> Customer (as identified in the Principal Agreement). Role: Controller (or Processor, as applicable).<\/li>\n<li><strong>Data Importer:<\/strong> Flikt.AI, with principal place of business in Florida, United States. Role: Processor (or Sub-processor, as applicable).<\/li>\n<\/ul>\n<p><strong>B. Description of Transfer<\/strong><\/p>\n<ul>\n<li><strong>Categories of data subjects:<\/strong> As described in Section 2.4 of the DPA.<\/li>\n<li><strong>Categories of Personal Data:<\/strong> As described in Section 2.5 of the DPA.<\/li>\n<li><strong>Special categories:<\/strong> None intentionally Processed.<\/li>\n<li><strong>Frequency of transfer:<\/strong> Continuous (on-demand, when Customer uploads documents or end users access the platform).<\/li>\n<li><strong>Nature of Processing:<\/strong> As described in Section 2.3 of the DPA.<\/li>\n<li><strong>Purposes of transfer:<\/strong> Provision of the Flikt.AI platform.<\/li>\n<li><strong>Period of retention:<\/strong> As described in Section 9 of the DPA.<\/li>\n<\/ul>\n<p><strong>C. Competent Supervisory Authority<\/strong><\/p>\n<p>Per Clause 13 of the SCCs, the supervisory authority of the EU Member State in which the data exporter is established, or \u2014 if the exporter is not established in the EU \u2014 the supervisory authority designated in writing by the data exporter, or, if none, the Irish Data Protection Commission.<\/p>\n<hr \/>\n<h1 id=\"annex-ii-technical-and-organizational-measures\">Annex II \u2014 Technical and Organizational Measures<\/h1>\n<p>The current TOMs in effect for the Flikt.AI platform are summarized below. Flikt.AI may update these from time to time, provided the level of protection is not materially decreased.<\/p>\n<table>\n<colgroup>\n<col style=\"width: 50%\" \/>\n<col style=\"width: 50%\" \/>\n<\/colgroup>\n<thead>\n<tr class=\"header\">\n<th>Measure<\/th>\n<th>Implementation<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr class=\"odd\">\n<td>Encryption in transit<\/td>\n<td>TLS 1.2 or higher for all customer-facing endpoints.<\/td>\n<\/tr>\n<tr class=\"even\">\n<td>Encryption at rest<\/td>\n<td>AES-256 for all Customer Data stored in cloud object storage, databases, and block storage.<\/td>\n<\/tr>\n<tr class=\"odd\">\n<td>Pseudonymization<\/td>\n<td>Used where feasible for analytics and logging.<\/td>\n<\/tr>\n<tr class=\"even\">\n<td>Confidentiality<\/td>\n<td>Personnel access controls, least-privilege provisioning, confidentiality undertakings.<\/td>\n<\/tr>\n<tr class=\"odd\">\n<td>Integrity<\/td>\n<td>Code review, dependency-vulnerability scanning, signed deployments.<\/td>\n<\/tr>\n<tr class=\"even\">\n<td>Availability<\/td>\n<td>Daily backups, point-in-time recovery, multi-AZ database deployment.<\/td>\n<\/tr>\n<tr class=\"odd\">\n<td>Resilience<\/td>\n<td>Automated failover for database; container-orchestrated compute.<\/td>\n<\/tr>\n<tr class=\"even\">\n<td>Restoration after incident<\/td>\n<td>Documented runbooks; backup restoration tested at least annually.<\/td>\n<\/tr>\n<tr class=\"odd\">\n<td>Testing and evaluation<\/td>\n<td>Internal review of TOMs at least annually.<\/td>\n<\/tr>\n<tr class=\"even\">\n<td>User identification and authorization<\/td>\n<td>Third-party identity provider; RS256-signed JWT sessions; role-based access controls.<\/td>\n<\/tr>\n<tr class=\"odd\">\n<td>Access logging<\/td>\n<td>Application-level audit logs; cloud-provider audit logging for infrastructure events.<\/td>\n<\/tr>\n<tr class=\"even\">\n<td>Data minimization<\/td>\n<td>Customer Data retained only for periods set in Privacy Policy \u00a75.<\/td>\n<\/tr>\n<tr class=\"odd\">\n<td>Quality assurance<\/td>\n<td>Pre-production environments isolated from production data.<\/td>\n<\/tr>\n<tr class=\"even\">\n<td>Sub-processor management<\/td>\n<td>DPAs in place with all Sub-processors listed in Annex III.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<hr \/>\n<h1 id=\"annex-iii-sub-processors\">Annex III \u2014 Sub-processors<\/h1>\n<table>\n<colgroup>\n<col style=\"width: 25%\" \/>\n<col style=\"width: 25%\" \/>\n<col style=\"width: 25%\" \/>\n<col style=\"width: 25%\" \/>\n<\/colgroup>\n<thead>\n<tr class=\"header\">\n<th>#<\/th>\n<th>Sub-processor<\/th>\n<th>Purpose<\/th>\n<th>Region<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr class=\"odd\">\n<td>1<\/td>\n<td>Anthropic, PBC<\/td>\n<td>AI analysis services. Customer Data is not used for model training per the provider\u2019s API terms.<\/td>\n<td>United States<\/td>\n<\/tr>\n<tr class=\"even\">\n<td>2<\/td>\n<td>Amazon Web Services, Inc.<\/td>\n<td>Cloud hosting and infrastructure (compute, database, object storage)<\/td>\n<td>United States<\/td>\n<\/tr>\n<tr class=\"odd\">\n<td>3<\/td>\n<td>Google LLC<\/td>\n<td>Backup optical character recognition (OCR) for scanned PDFs<\/td>\n<td>United States<\/td>\n<\/tr>\n<tr class=\"even\">\n<td>4<\/td>\n<td>Stripe, Inc.<\/td>\n<td>Payment processing; PCI DSS Level 1<\/td>\n<td>United States (with EU subsidiary)<\/td>\n<\/tr>\n<tr class=\"odd\">\n<td>5<\/td>\n<td>Sendinblue \/ Brevo SAS<\/td>\n<td>Transactional email \u2014 application notifications, contact-form delivery, and password resets<\/td>\n<td>European Union (Paris)<\/td>\n<\/tr>\n<tr class=\"even\">\n<td>6<\/td>\n<td>Cloudflare, Inc.<\/td>\n<td>Edge worker for <code>demo.flikt.ai<\/code>; no customer plan-set data<\/td>\n<td>Global edge network<\/td>\n<\/tr>\n<tr class=\"odd\">\n<td>7<\/td>\n<td>Clerk Inc.<\/td>\n<td>User authentication, session management, RS256 JWT issuance<\/td>\n<td>United States<\/td>\n<\/tr>\n<tr class=\"even\">\n<td>8<\/td>\n<td>Sentry, Inc.\u00a0(Functional Software, Inc.)<\/td>\n<td>Application error tracking and exception monitoring; receives stack traces and limited request metadata<\/td>\n<td>United States<\/td>\n<\/tr>\n<tr class=\"odd\">\n<td>9<\/td>\n<td>GoDaddy.com, LLC<\/td>\n<td>Marketing site hosting (<code>flikt.ai<\/code>); no customer plan-set data<\/td>\n<td>United States<\/td>\n<\/tr>\n<tr><td>10<\/td><td>PostHog, Inc.<\/td><td>Product analytics &#8212; product usage and behavioral metrics; no customer plan-set data<\/td><td>United States<\/td><\/tr>\n<\/tbody>\n<\/table>\n<p>The current list is also published at <code>flikt.ai\/legal\/sub-processors<\/code>. Customer may subscribe to change notifications by emailing <strong>legal@flikt.ai<\/strong>.<\/p>\n<hr \/>\n<p><em>End of Data Processing Agreement.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Data Processing Agreement Effective Date: [TO BE INSERTED ON EXECUTION] Last Updated: May 2, 2026 Version: 1.0 This Data Processing Agreement (\u201cDPA\u201d) forms part of, and is incorporated into, the Terms of Service, Master Service Agreement, or other written agreement (the \u201cPrincipal Agreement\u201d) between Flikt.AI (\u201cFlikt.AI,\u201d \u201cwe,\u201d \u201cus,\u201d or \u201cProcessor\u201d) and the customer identified in [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":300,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-303","page","type-page","status-publish","hentry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Data Processing Agreement - Flikt.AI<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/flikt.ai\/es\/legal\/dpa\/\" \/>\n<meta property=\"og:locale\" content=\"es_MX\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Data Processing Agreement - Flikt.AI\" \/>\n<meta property=\"og:description\" content=\"Data Processing Agreement Effective Date: [TO BE INSERTED ON EXECUTION] Last Updated: May 2, 2026 Version: 1.0 This Data Processing Agreement (\u201cDPA\u201d) forms part of, and is incorporated into, the Terms of Service, Master Service Agreement, or other written agreement (the \u201cPrincipal Agreement\u201d) between Flikt.AI (\u201cFlikt.AI,\u201d \u201cwe,\u201d \u201cus,\u201d or \u201cProcessor\u201d) and the customer identified in [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/flikt.ai\/es\/legal\/dpa\/\" \/>\n<meta property=\"og:site_name\" content=\"Flikt.AI\" \/>\n<meta property=\"article:modified_time\" content=\"2026-06-03T00:42:21+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/flikt.ai\/wp-content\/uploads\/2026\/03\/og_final_website.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Tiempo de lectura\" \/>\n\t<meta name=\"twitter:data1\" content=\"12 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/flikt.ai\\\/legal\\\/dpa\\\/\",\"url\":\"https:\\\/\\\/flikt.ai\\\/legal\\\/dpa\\\/\",\"name\":\"Data Processing Agreement - Flikt.AI\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/flikt.ai\\\/#website\"},\"datePublished\":\"2026-05-02T22:47:28+00:00\",\"dateModified\":\"2026-06-03T00:42:21+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/flikt.ai\\\/legal\\\/dpa\\\/#breadcrumb\"},\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/flikt.ai\\\/legal\\\/dpa\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/flikt.ai\\\/legal\\\/dpa\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/flikt.ai\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Legal\",\"item\":\"https:\\\/\\\/flikt.ai\\\/legal\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Data Processing Agreement\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/flikt.ai\\\/#website\",\"url\":\"https:\\\/\\\/flikt.ai\\\/\",\"name\":\"Flikt.AI\",\"description\":\"Human Error Ends Here.\",\"publisher\":{\"@id\":\"https:\\\/\\\/flikt.ai\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/flikt.ai\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"es\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/flikt.ai\\\/#organization\",\"name\":\"Flikt.AI\",\"url\":\"https:\\\/\\\/flikt.ai\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/flikt.ai\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/flikt.ai\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/wp-site-icon-512.png\",\"contentUrl\":\"https:\\\/\\\/flikt.ai\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/wp-site-icon-512.png\",\"width\":512,\"height\":512,\"caption\":\"Flikt.AI\"},\"image\":{\"@id\":\"https:\\\/\\\/flikt.ai\\\/#\\\/schema\\\/logo\\\/image\\\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Acuerdo de tratamiento de datos - Flikt.AI","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/flikt.ai\/es\/legal\/dpa\/","og_locale":"es_MX","og_type":"article","og_title":"Data Processing Agreement - Flikt.AI","og_description":"Data Processing Agreement Effective Date: [TO BE INSERTED ON EXECUTION] Last Updated: May 2, 2026 Version: 1.0 This Data Processing Agreement (\u201cDPA\u201d) forms part of, and is incorporated into, the Terms of Service, Master Service Agreement, or other written agreement (the \u201cPrincipal Agreement\u201d) between Flikt.AI (\u201cFlikt.AI,\u201d \u201cwe,\u201d \u201cus,\u201d or \u201cProcessor\u201d) and the customer identified in [&hellip;]","og_url":"https:\/\/flikt.ai\/es\/legal\/dpa\/","og_site_name":"Flikt.AI","article_modified_time":"2026-06-03T00:42:21+00:00","og_image":[{"width":1200,"height":630,"url":"https:\/\/flikt.ai\/wp-content\/uploads\/2026\/03\/og_final_website.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Tiempo de lectura":"12 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/flikt.ai\/legal\/dpa\/","url":"https:\/\/flikt.ai\/legal\/dpa\/","name":"Acuerdo de tratamiento de datos - Flikt.AI","isPartOf":{"@id":"https:\/\/flikt.ai\/#website"},"datePublished":"2026-05-02T22:47:28+00:00","dateModified":"2026-06-03T00:42:21+00:00","breadcrumb":{"@id":"https:\/\/flikt.ai\/legal\/dpa\/#breadcrumb"},"inLanguage":"es","potentialAction":[{"@type":"ReadAction","target":["https:\/\/flikt.ai\/legal\/dpa\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/flikt.ai\/legal\/dpa\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/flikt.ai\/"},{"@type":"ListItem","position":2,"name":"Legal","item":"https:\/\/flikt.ai\/legal\/"},{"@type":"ListItem","position":3,"name":"Data Processing Agreement"}]},{"@type":"WebSite","@id":"https:\/\/flikt.ai\/#website","url":"https:\/\/flikt.ai\/","name":"Flikt.AI","description":"El error humano termina aqu\u00ed.","publisher":{"@id":"https:\/\/flikt.ai\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/flikt.ai\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"es"},{"@type":"Organization","@id":"https:\/\/flikt.ai\/#organization","name":"Flikt.AI","url":"https:\/\/flikt.ai\/","logo":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/flikt.ai\/#\/schema\/logo\/image\/","url":"https:\/\/flikt.ai\/wp-content\/uploads\/2026\/06\/wp-site-icon-512.png","contentUrl":"https:\/\/flikt.ai\/wp-content\/uploads\/2026\/06\/wp-site-icon-512.png","width":512,"height":512,"caption":"Flikt.AI"},"image":{"@id":"https:\/\/flikt.ai\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/flikt.ai\/es\/wp-json\/wp\/v2\/pages\/303","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/flikt.ai\/es\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/flikt.ai\/es\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/flikt.ai\/es\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/flikt.ai\/es\/wp-json\/wp\/v2\/comments?post=303"}],"version-history":[{"count":5,"href":"https:\/\/flikt.ai\/es\/wp-json\/wp\/v2\/pages\/303\/revisions"}],"predecessor-version":[{"id":489,"href":"https:\/\/flikt.ai\/es\/wp-json\/wp\/v2\/pages\/303\/revisions\/489"}],"up":[{"embeddable":true,"href":"https:\/\/flikt.ai\/es\/wp-json\/wp\/v2\/pages\/300"}],"wp:attachment":[{"href":"https:\/\/flikt.ai\/es\/wp-json\/wp\/v2\/media?parent=303"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}