Data Processing Agreement (DPA)

Our contractual terms governing the processing, protection, and security of merchant and customer data.

Key DPA Clauses & Commitments

Data Processing Scope & Purpose

BAAN processes customer business data solely to provide, ground, and optimize the AI marketing intelligence workflows requested by the merchant.

Subprocessor Authorization

BAAN utilizes vetted third-party cloud infrastructure providers (AWS, PostgreSQL, Redis) under strict confidentiality and security terms.

Security Measures (Annex II)

Implementation of technical and organizational security measures (TOMs) including AES-256 encryption at rest, TLS 1.3 transit, and role-based access control.

Data Incident Notification

Commitment to notify affected organizations without undue delay (within 48 hours) upon becoming aware of a confirmed personal data breach.

Return and Deletion of Data

Upon termination of services, BAAN will securely delete or return all customer personal data in accordance with the master subscription agreement.