Data Processing Agreement

The Data Processing Agreement (DPA) sets out the terms on which Zeus AI Business Solutions Ltd (trading as Athena) processes personal data on behalf of customers using the Athena platform, in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. What the DPA Covers

• Roles and responsibilities: Zeus AI Business Solutions Ltd as Processor, the Customer as Controller.
• Processing details: Subject matter, duration, nature, purpose, types of personal data, and categories of data subjects.
• Security measures: Technical and organisational measures including encryption, access controls, and data isolation.
• Sub-processor management: 30-day notification of changes with objection rights.
• Breach notification: 48-hour notification commitment to affected customers.
• International transfers: IDTA/SCC safeguards for cross-border data transfers.
• AI processing: Explicit commitment that customer data is not used for AI model training.
• Audit rights: Customer rights to audit compliance.
• Data return and deletion: 30-day export window, 90-day secure deletion on termination.

2. Annexes

• Annex 1: Details of Processing - types of data, data subjects, purposes.
• Annex 2: Technical and Organisational Security Measures - encryption, RBAC, RLS, 2FA, infrastructure details.
• Annex 3: Sub-Processor Register - all third-party processors with locations and safeguards. Also available at /sub-processors.

3. Download

The DPA is available as a Word document for review and countersigning. If you require a PDF version, please contact us.

To request a copy of the DPA, please email lee@askathena-ai.co.uk and we will send it to you for review and signature.

DPA Requests and Countersigning
Athena Support Team
Email: lee@askathena-ai.co.uk
Website: askathena-ai.co.uk

4. Supplier Details

5. Related Documents

• Privacy Policy
• Terms of Service
• Sub-Processor Register
• Security & Trust