DataProcessingAgreement

Data Processing Agreement

This Data Processing Agreement ("DPA") applies to institutional customers and partners who process personal data of their users through the Allelic platform.

Definitions

Data Controller: The institution or partner determining the purposes of data processing

Data Processor: Allelic Health Technologies Pvt. Ltd.

Data Subject: The individual whose personal/genetic data is being processed

Processor Obligations

Allelic as a Data Processor commits to:

Process data only on documented instructions from the Controller

Ensure all staff with data access are bound by confidentiality

Implement appropriate technical and organizational security measures

Notify the Controller of any data breach within 72 hours

Delete or return all personal data upon termination of the agreement

Sub-Processors

Allelic uses the following categories of sub-processors:

Cloud infrastructure providers (India-based)

Payment processors (for billing only — no health data shared)

Communication providers (for notifications)

A complete list of sub-processors is available upon request.

Audit Rights

Controllers may audit Allelic's data processing activities with 30 days written notice, at their own expense, no more than once per calendar year.

Contact

For DPA inquiries: legal@allelic.in