← Back to AI Employee OS

Data protection

Data Processing Agreement

Last updated: 29 July 2026

1. Roles

For customer personal data processed to provide AI Employee OS, the customer generally acts as controller and eban GmbH as processor, unless the parties agree otherwise.

2. Processing details

Processing may include hosting, organization administration, authentication, document ingestion, indexing, retrieval, model interaction, support, security and deletion. Data subjects may include customer users, employees, contractors, contacts and persons referenced in customer content.

3. Customer instructions

We process customer personal data only on documented instructions, including instructions expressed through service configuration and use, unless applicable law requires otherwise.

4. Confidentiality and security

Authorized personnel are subject to confidentiality obligations. Technical and organizational measures are designed around access control, tenant separation, encryption in transit, operational logging, backups and incident handling.

5. Subprocessors

Infrastructure, hosting, model, communication and support providers may act as subprocessors. Contractual safeguards are used as required, and material changes are communicated according to the applicable agreement.

6. Assistance

Taking into account the nature of processing, we provide reasonable assistance with data-subject requests, security obligations, impact assessments and supervisory authority consultations.

7. Incidents

We notify customers without undue delay after becoming aware of a confirmed personal data breach affecting customer personal data and provide available information needed for customer obligations.

8. Return and deletion

After termination, customer personal data is returned or deleted according to the agreement, configured retention periods and legal obligations.

9. International transfers and audits

Appropriate transfer safeguards are used where required. Information reasonably necessary to demonstrate compliance can be provided subject to confidentiality, security and proportionality requirements.

10. Execution

A customer-specific, signed DPA and current subprocessor information can be requested at info@ai-employee-os.com.

These website documents provide general commercial and product information and should be reviewed by qualified legal counsel before contractual use.