Data Processing Addendum (DPA)

1. Scope and Roles

This Data Processing Addendum ("DPA") applies to the processing of personal data by Xorent, Inc. ("Processor") on behalf of customers using Xorent services ("Controller"), including Atlassian Marketplace app functionality.

2. Processing Details

• Subject matter: Provision of test management, integration, and support services.
• Duration: For the term of the applicable customer agreement and limited retention periods thereafter.
• Nature and purpose: Storage, organization, retrieval, analytics, and support operations required to provide the service.
• Categories of data: Account/profile data, issue/project metadata, test artifacts, and operational audit records.
• Data subjects: End users and customer personnel using the service.

3. Processor Obligations

• Process personal data only on documented instructions.
• Ensure personnel with access are bound by confidentiality obligations.
• Implement appropriate technical and organizational security measures.
• Assist Controller with applicable data subject rights requests.
• Notify Controller without undue delay after becoming aware of a confirmed personal data breach affecting Controller data.

4. Sub-processors

Processor may use approved sub-processors to deliver services. Current core sub-processors include infrastructure and service providers such as Amazon Web Services (AWS), and billing providers where applicable. Processor remains responsible for sub-processor compliance with applicable data protection obligations.

5. International Data Transfers

Where personal data is transferred outside the EEA/UK/Switzerland, Processor applies appropriate transfer safeguards under applicable law, including standard contractual clauses where required.

6. Return and Deletion

Upon termination of services and subject to applicable legal or contractual retention requirements, Processor will delete or return personal data in accordance with the customer agreement and documented retention policy.

7. Contact

For DPA requests, execution copies, or privacy inquiries, contact privacy@xorent.com or legal@xorent.com.

This page provides the standard DPA terms reference for Xorent services. Customers may request an executed DPA through the contacts above.