Data processing addendum
For customers who need nexclip to sign one.
This is a structural placeholder, not a legal document. Each heading names what belongs under it; none of it has been drafted or reviewed by a lawyer, and nothing here should be relied on.
What this document is for
The controller–processor terms that a business customer's own compliance requires before uploading recordings of identifiable people.
The clauses it needs
01Roles
Who is controller and who is processor, per category of data.
02Scope and duration
The subject matter, nature and purpose of the processing.
03Instructions
That processing happens only on documented instructions, and the exceptions.
04Confidentiality and security
The technical and organisational measures, as an annex rather than an adjective.
05Sub-processors
Authorisation, the current list, and notice of changes.
06Assistance
Help with data-subject requests, impact assessments and breach notification.
07Deletion and return
What happens at the end of the contract.
08Audit
What evidence is provided, and on what terms.
Last structural revision 8 August 2026. No clause has been drafted. See the other legal documents for the rest of the set.