# Clinicom Data Processing Agreement (Template)

This template is for NHS primary care, PCN, and pharmacy customers. Legal review required before signature.

## Parties

- **Controller**: [Customer organization name]
- **Processor**: Clinicom AI / Verlox

## Subject matter

Processing of personal data submitted through the Clinicom interpretation platform, including clinician accounts, session transcripts, and optionally linked patient records with consent.

## Duration

Term of the subscription agreement plus retention period (default 365 days unless specified).

## Nature and purpose

Live and asynchronous healthcare communication interpretation, audit logging, safety flagging, and clinical handoff summaries.

## Categories of data subjects

Clinicians, practice staff, and patients where linked with consent.

## Security measures

- TLS in transit
- Role-based access control
- Audit logging
- Configurable retention and purge jobs
- UK residency option on Trust tier (contractual)

## Sub-processors

Listed in Annex B. Customer notified of material changes per contract terms.

## Data subject rights

Processor assists Controller with access, erasure, and portability requests within agreed SLAs.

## Breach notification

Processor notifies Controller without undue delay upon becoming aware of a personal data breach.

## Signatures

Controller: _________________________ Date: _________

Processor: _________________________ Date: _________