Data Processing Addendum
How we process personal data on your behalf
This Data Processing Addendum (“DPA”) applies where MarQi Cloud processes personal data on behalf of a customer in the course of providing the service. It forms part of our Terms of Service. Where you require a signed copy or your own DPA template, contact us and we will work through it.
Roles
For personal data contained in customer content, you are the controller (or a processor acting for your own customer) and MarQi Cloud is the processor. For the account, billing and support data we hold about you as our customer, we are the controller — that processing is described in our Privacy Policy.
Scope of processing
Subject matter and duration. Provision of cloud infrastructure services for as long as your account is active, plus any agreed transition period.
Nature and purpose. Hosting, storage, transmission, backup and — where you request it — administration of the systems on which your data resides.
Types of data and categories of data subject. Determined by you, since you decide what to run on the infrastructure. We do not select or inspect it.
Our obligations
We process personal data only on your documented instructions, including the instruction inherent in your use of the service, unless we are required to do otherwise by law — in which case we will tell you first unless the law prohibits it. Personnel with access to personal data are bound by confidentiality obligations. We will not use customer content for any purpose of our own, including training machine learning models.
Security measures
We maintain technical and organisational measures appropriate to the risk. These include access control limiting production access to the engineers who require it, authentication and logging of administrative access, encryption of inter-zone traffic in transit, replication of customer volumes across separate nodes, and continuous platform monitoring by our NOC. The underlying architecture is documented publicly under storage architecture and network fabric. Measures are reviewed as the platform evolves.
Subprocessors
We engage subprocessors only where necessary to deliver the service, impose data protection obligations on them no less protective than those in this DPA, and remain responsible to you for their performance. We will inform you of any intended addition or replacement of a subprocessor with a reasonable opportunity to object. A current list is available on request.
Assistance to you
Taking into account the nature of the processing, we will assist you — by appropriate technical and organisational measures and insofar as possible — in responding to data subject requests to exercise their rights, and in meeting your obligations regarding security, breach notification, data protection impact assessments and prior consultation with a supervisory authority.
Personal data breach
We will notify you without undue delay after becoming aware of a personal data breach affecting personal data we process for you, and will provide the information reasonably available to us so that you can meet your own notification obligations. Our practice is to communicate early with incomplete information rather than late with a finished report.
International transfers
Our infrastructure operates from the United States. Where personal data originating in the European Economic Area, the United Kingdom or Switzerland is transferred to us, that transfer is made subject to an appropriate transfer mechanism, and we will enter into standard contractual clauses on request.
Audit
We will make available the information reasonably necessary to demonstrate compliance with this DPA and will contribute to audits conducted by you or an auditor you mandate, on reasonable notice and subject to confidentiality and to not compromising the security of other customers.
Deletion and return
On termination you may retrieve your data during a reasonable transition window, after which we will delete it in accordance with our retention practices, except where storage is required by law. Because the platform runs standard open source components and machine images, retrieval does not depend on a proprietary export tool.
Contact us
MarQi Cloud
190 Bluegrass Valley Pkwy, Alpharetta, GA 30005, United States
Email: support@marqi.cloud · Phone: +1-770-369-9321
Related: Privacy Policy · Terms of Service · All legal documents