Data processing agreement (dpa) — MeetGeek

Cited by

Facts read from this source

• EU entity Report an error

  “"MeetGeek" means AIVISION PRODUCTS SRL for the EU instance of the Services and MeetGeek US Infra, Inc. for the US instance.”

• DPA laws covered Report an error

  “These include, as applicable, the EU General Data Protection Regulation (Regulation (EU) 2016/679) ("GDPR"); the UK GDPR and Data Protection Act 2018; the Swiss Federal Act on Data Protection; US federal and state privacy laws, including the California Consumer Privacy Act as amended ("CCPA") (together, "U.S. Privacy Laws"); Brazil's General Data Protection Law (Law No. 13,709/2018) ("LGPD"); Canada's Personal Information Protection and Electronic Documents Act; the Australian Privacy Act 1988”

• Roles Report an error

  “Customer determines the purposes and means of processing Customer Data ("Data Controller"); MeetGeek processes Customer Data on Customer's behalf and instructions ("Data Processor").”

• No model training Report an error

  “no model training: not use Customer Data, including recordings, transcripts, summaries, prompts and other outputs generated from Customer Data, to train, fine-tune, evaluate or otherwise develop or improve any artificial intelligence or machine learning model, whether owned by MeetGeek or a third party, unless Customer has expressly opted in in writing”

• List URL Report an error

  “engage the organisations listed at meetgeek.ai/subprocessors (each a "Subprocessor", and the list the "Subprocessor List") to process Customer Data.”

• Notice period days Report an error

  “MeetGeek will notify Customer of any intended change at least 30 days before it takes effect. Customer may object within 15 days on reasonable grounds”

• Audit annual limit Report an error

  “on reasonable request, no more than once a year, provide Customer with MeetGeek's privacy and security policies and other information necessary to demonstrate compliance with this DPA and Data Protection Laws”

• SOC 2 type2 Report an error

  “An annual SOC 2 Type II audit by a qualified, independent auditor. A summary is available on reasonable request.”

• Breach notification hours Report an error

  “notify Customer of any Personal Data Breach by MeetGeek, its Subprocessors or anyone acting on its behalf without undue delay, and in any event within 72 hours of becoming aware of it”

• UK addendum Report an error

  “the parties will comply with Part 2 (Mandatory Clauses) of the International Data Transfer Addendum to the EU SCCs issued by the UK Information Commissioner under section 119A of the Data Protection Act 2018 (version B1.0)”

• Deletion period Report an error

  “Within 30 days after the Agreement ends, MeetGeek will delete Customer Data from its active systems and direct its Subprocessors to do the same. Customer Data in encrypted backups is overwritten within a further 35 days.”

• Export Report an error

  “Customer can export and delete Customer Data in the Services at any time.”

• Region migration Report an error

  “On request, and subject to the order form, MeetGeek will migrate Customer Data between Hosting Regions and confirm its deletion from the original region.”

• Regions Report an error

  “Customer's instance determines its hosting region ("Hosting Region"): the European Union for the EU instance and the United States for the US instance.”

• EU entity address Report an error

  “EU instance: AIVISION PRODUCTS SRL, Str. Vânători nr. 5, Buzău, Buzău County, Romania.”

• US entity address Report an error

  “US instance: MeetGeek US Infra, Inc., 1111B S Governors Ave, STE 26235, Dover, DE 19904, USA.”

• Phi baa Report an error

  “Protected health information is processed only under a signed Business Associate Agreement.”

• Encryption Report an error

  “AES-256 encryption of data at rest in production datastores. TLS 1.2 or higher for data in transit.”

• Penetration testing Report an error

  “Penetration testing of the Services at least annually, with findings remediated on a timeline matching their risk.”

• Provider Report an error

  “MeetGeek does not operate its own data centres. Physical security of production systems is provided by Amazon Web Services under its SOC 2 and ISO 27001 certified controls.”

• Retention custom enterprise Report an error

  “Retention: for the term of the Agreement, as set by Customer's retention settings or a custom retention period agreed for Enterprise plans, then deleted under Section 8.”

• DPA signed copy Report an error

  “For a signed copy of this Addendum, visit security.meetgeek.ai.”

• Security measures summary Report an error

  “maintain reasonable and appropriate organisational and technical security measures, including for personnel, facilities, hardware and software, storage and networks, access controls, monitoring and logging, vulnerability and breach detection, incident response and encryption, to protect Customer Data against unauthorised or accidental access, loss, alteration, disclosure or destruction, as described in Exhibit B”

• Backup availability Report an error

  “Encrypted backups replicated within the Hosting Region, with restoration procedures tested at least annually.”

2 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The Management Consultant Retention, AI training & administration
• The Management Consultant European sovereignty
• The Data Protection Officer Retention, AI training & administration
• The Data Protection Officer European sovereignty
• The IT Lead Retention, AI training & administration
• The IT Lead European sovereignty
• The Sales Team Lead Retention, AI training & administration
• The Sales Team Lead European sovereignty
• The Skeptic Retention, AI training & administration
• The Skeptic European sovereignty
• The Works Council Chair Retention, AI training & administration
• The Works Council Chair European sovereignty