Data Processing Addendum

The following DPA template is ready for signature. Please create a ticket in case you would like to receive a signed copy from us.

DATA PROCESSING ADDENDUM

This Data Processing Addendum ("DPA") is entered into and made effective as of [Date], (the "Effective Date"), by and between:

Pio Software Ltd
128, City Road
London London EC1V2NX
United Kingdom
Company No. 14617087
(hereinafter referred to as the "Data Processor")

and

[Customer's Name]
[Customer's Address]
[City, Country]
(hereinafter referred to as the "Data Controller").

The Data Controller and Data Processor are collectively referred to as the "Parties."

BACKGROUND

Pio Software Ltd provides applications that facilitate the import of data from various cloud providers to Atlassian JSM (Jira Service Management). The Data Controller wishes to use Pio Software Ltd's applications and may provide personal data to the Data Processor for processing.

AGREEMENT

Definitions

1.1 "Data Protection Laws" means all applicable data protection and privacy laws, including but not limited to the General Data Protection Regulation (GDPR).

1.2 "Data Subject," "Personal Data," "Processing," and "Processor" shall have the meanings ascribed to them in the Data Protection Laws.

Subject Matter and Duration

2.1 The subject matter of the data processing under this DPA is the personal data provided by the Data Controller to the Data Processor in connection with the use of Pio Software Ltd's applications. The processing shall have the duration as long as the Data Controller uses the applications.

Nature and Purpose of Processing

3.1 The Data Processor shall process Personal Data as necessary to provide the services outlined in the relevant agreement between the Parties.

3.2 The Data Processor shall process Personal Data solely for the purpose of providing the services and in accordance with the documented instructions of the Data Controller.

Data Security

4.1 The Data Processor shall implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including protecting Personal Data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

Data Subject Rights

5.1 The Data Processor shall assist the Data Controller in responding to data subject requests, as required by applicable Data Protection Laws.

Sub-Processing

6.1 The Data Processor shall not engage any sub-processor for the processing of Personal Data without the prior written consent of the Data Controller.

Data Breach Notification

7.1 The Data Processor shall notify the Data Controller without undue delay after becoming aware of a Personal Data breach.

Data Deletion or Return

8.1 Upon termination of the relevant agreement or upon the Data Controller's request, the Data Processor shall delete or return all Personal Data processed under this DPA.

Audit and Compliance

9.1 The Data Processor shall make available to the Data Controller all information necessary to demonstrate compliance with the obligations laid down in this DPA.

General Provisions

10.1 This DPA is governed by and construed in accordance with the laws of Sweden.

10.2 Any amendments to this DPA must be in writing and signed by both Parties.

IN WITNESS WHEREOF, the Parties have executed this Data Processing Addendum as of the Effective Date.

Data Processor:

Pio Software Ltd

[Signature] [Date]

Data Controller:

[Customer's Name]

[Signature] [Date]