Notice
This page is a translation of the Korean draft and remains subject to legal review. Please treat its contents as provisional until that review is complete.
Brandeis AI is currently in private preview. Learn more
Legal
The Brandeis AI DPA forms part of every Master Services Agreement (MSA) involving personal information processing. It includes controller–processor provisions under South Korea's Personal Information Protection Act (PIPA), EU Standard Contractual Clauses (SCCs), the UK International Data Transfer Agreement (IDTA), and a list of approved sub-processors.
This page is a translation of the Korean draft and remains subject to legal review. Please treat its contents as provisional until that review is complete.
Your organization is the controller. Brandeis AI acts as a processor for matter content and as a controller only for the limited operational metadata needed to run the service.
The sub-processor list is published in the Trust Center and updated 30 days before changes take effect. You may object to a new sub-processor for a specific matter, in which case an alternative is provided.
Personal information may be transferred to South Korea, the EEA, the UK, and the US under PIPA transfer requirements, SCCs, and the IDTA. Single-region agreements are available where transfers are restricted.