Data Processing Addendum

This Data Processing Addendum (“DPA”) forms part of the agreement between the customer (“Data Controller”) and Investconclave AI Solutions Pvt. Ltd. (“InvestConclave”, “Data Processor”) and governs the processing of personal data under DPDP and, where applicable, the GDPR.

Roles

The customer is the controller of personal data it uploads; InvestConclave processes that data on the customer’s instructions to provide the service.

Security

We maintain appropriate technical and organizational measures, including encryption in transit and at rest, access controls, and audit logging.

Sub-processors

We engage a limited set of sub-processors and will give notice of material changes; a current named list is available on request. The categories are published on our security page.

Where data is hosted and processed

The CADO application and document storage are hosted in Mumbai, India; some AI processing uses third-party AI providers. Your documents are not used to train AI models.

Requesting a signed DPA

Need a counter-signed copy for your records? Email hello@investconclave.com and we’ll arrange it.