RiskD3M

Data Processing Agreement

ElasticD3M, LLC
Operative draft. Final DPA is under counsel review. For questions, contact [email protected].

This Data Processing Agreement supplements the Terms of Use and applies where ElasticD3M, LLC processes data on your behalf in providing RiskD3M.

Roles and scope

You are the controller of the facts you supply; ElasticD3M is the processor and processes those facts only to provide the analysis you purchased and on your documented instructions.

US-only processing

All processing and storage occur in United States regions. ElasticD3M does not transfer your data outside the United States and does not use non-US data planes.

Subprocessors

ElasticD3M uses a limited set of US-based subprocessors, currently: Stripe (payments), Resend (transactional email), Anthropic (AI model inference under a no-training commitment), and US-region cloud hosting and storage. We will inform you of material changes to this list.

Security

ElasticD3M encrypts data in transit and at rest, restricts access on a need-to-know basis, maintains audit logging, and applies safeguards appropriate to the sensitivity of the data.

Return and deletion

On completion of an engagement or on your request, ElasticD3M will return or delete your data, except where retention is required for audit integrity or by law. RiskD3M does not use your confidential facts to train any third-party model.

RiskD3M, powered by ElasticD3M. Patent Pending.