Quantum does not publish a generic DPA as if it covered every project. Data-processing roles and terms are established from the actual engagement data flow.
When a DPA is used
If the agreed service requires Quantum to process personal data on a customer’s behalf, the parties determine their roles and put the required processing terms in writing before that processing begins.
What it should cover
The agreement should identify subject matter, duration, data categories, people affected, instructions, confidentiality, security measures, subprocessors, assistance, deletion or return, audit information, incident responsibilities, and any transfer mechanism the parties’ counsel approves.
International transfers
Quantum is an Indian company. Where a customer determines that EU, UK, or other transfer terms are required, the appropriate reviewed mechanism and annexes must be agreed for the specific data flow. This page does not claim that a transfer mechanism already applies to every engagement.
Request terms
Send the proposed data flow, regions, customer template, and procurement contact to admin@quantumai-solutions.com.