DPA

Data Processing Addendum

Last updated: May 1, 2026.

Roles

For customer company data, the customer is the controller and Office of Agents acts as processor or service provider as applicable.

Processing purpose

Office of Agents processes customer data to provide the subscribed Chief of Staff agent, maintain corporate memory, generate operating outputs, troubleshoot, secure, and improve the service.

Security measures

Measures include environment-scoped secrets, encrypted token storage design, authenticated access, tenant-scoped queries, audit logging, and verified provider webhooks.

Deletion

On written request, Office of Agents will delete or return customer data unless retention is required by law, dispute, security, or financial record obligations.