Skip to main content

Data Processing Agreement

Last updated June 14, 2026

DRAFT - pending legal review. This document is provided for transparency and is not yet finalized or legal advice.

This Data Processing Agreement (DPA) applies where Kairoo (operated by Matters AI) processes personal data on behalf of a business customer (controller) under GDPR Article 28 and similar laws.

Summary

  • Roles: customer is controller; Kairoo is processor.
  • Scope: processing is limited to providing the service.
  • Sub-processors: listed at Sub-processors; we notify of changes.
  • Security: see Security.
  • International transfers: under appropriate safeguards (e.g., SCCs) where applicable.
  • Sub-processor obligations, audit rights, and breach notification will be addressed in the full DPA, available on request.

A signable DPA is available on request - contact privacy+kairoo@mreshank.com. (Full executable version pending finalization.)