Data Processing Addendum

Draft summary for review. The binding DPA is executed as part of your cxOptima agreement; have legal counsel review before relying on this.

This page summarises how Universal IT Solutions Limited ("UITS") processes personal data on behalf of cxOptima customers. Where you deploy cxOptima in your own infrastructure, you remain the controller of your data and UITS's access is limited accordingly.

Roles

For data processed through the cxOptima product on your behalf, you are the data controller and UITS (or the software running in your environment) acts as processor, processing data only on your documented instructions.

Data residency

cxOptima can be self-hosted so that personal data never leaves your infrastructure. In self-hosted deployments, UITS does not host or access your production data by default.

Security

We apply the technical and organisational measures described on our security page, including tier segmentation, verified identity across trust boundaries, role-based access control and audit logging.

Sub-processors

Where a managed deployment is used, a current list of sub-processors is provided as part of your agreement.

Contact

Data protection enquiries: privacy@cxoptima.com.