Data Processing Addendum (DPA), v1.2

NomoCoda-DPA-v1.2.pdf

Effective: May 13, 2026

This page is the canonical, current text of NomoCoda's Data Processing Addendum, incorporated by reference into the Terms of Service for customers subject to the GDPR, UK GDPR, the California Consumer Privacy Act, or equivalent regimes. The executable PDF version, including the signature page, is available for download on this page.

This Data Processing Addendum ("DPA") forms part of the agreement between NomoCoda LLC ("NomoCoda," "Processor") and the customer entity identified on the signature page ("Customer," "Controller") for the use of Lens (the "Service"). Where there is a conflict, this DPA prevails over the Terms of Service for matters of personal data processing.

1. Definitions

Capitalized terms used and not defined here have the meanings given in the Terms of Service or in applicable Data Protection Laws.

• Data Protection Laws means GDPR, UK GDPR, the California Consumer Privacy Act / California Privacy Rights Act ("CCPA/CPRA"), Brazil's Lei Geral de Proteção de Dados ("LGPD"), and any other applicable privacy or data-protection law.
• Personal Data means any information relating to an identified or identifiable natural person processed by NomoCoda on Customer's behalf in connection with the Service.
• Standard Contractual Clauses or SCCs means the European Commission's standard contractual clauses for the transfer of personal data to third countries, currently Module 2 (Controller to Processor) of Decision 2021/914.
• Sub-processor means any third party engaged by NomoCoda to process Personal Data on Customer's behalf.

2. Roles and scope

Customer is the Controller of Personal Data. NomoCoda is the Processor. NomoCoda processes Personal Data only on documented instructions from Customer, which include the Terms of Service, this DPA, and any further instructions Customer provides through the Service or in writing.

This DPA applies for the duration of the Service and any post-termination period during which NomoCoda holds Personal Data.

3. Processing details

The subject matter, duration, nature, purpose, types of Personal Data, and categories of data subjects are described in Annex A below.

4. Customer obligations

Customer warrants that:

• It has all rights, consents, and legal bases necessary to authorize NomoCoda to process Personal Data as contemplated by the Service.
• Its instructions to NomoCoda comply with Data Protection Laws.