Data Processing Agreement

This DPA is incorporated into the NSSSoft Terms of Service and governs how NSSSoft processes personal data on behalf of clients who are data controllers under GDPR or the India DPDP Act 2023.

1. Roles

The client is the Data Controller. NSSSoft Technologies Pvt. Ltd. is the Data Processor, processing personal data only as instructed by the client and as necessary to deliver the agreed services.

2. Data Security

NSSSoft implements appropriate technical and organizational measures to protect personal data, including TLS 1.3 encryption in transit, AES-256 encryption at rest, access logging, and role-based access controls.

3. Sub-Processors

NSSSoft may engage sub-processors (e.g., cloud infrastructure providers) and maintains an updated sub-processor list available on request.

4. Data Subject Rights

NSSSoft will assist the client in responding to data subject access, correction, and erasure requests within 5 business days of notification.

5. Contact

For DPA-related queries: admin@nsssoft.in