Copperwick Logistics - Data Processing Agreement (signed)
Documentexecuted Copperwick Logistics: documents · dpa · executed · 2026-05-15
Executed Data Processing Agreement signed 15 May 2026, with Copperwick Logistics as controller and BB-Demo as processor. It forms part of the Master Services Agreement. It states no price, availability or response-time figures.
What it says
What this says
Current to 11 Oct 26Executed Data Processing Agreement signed 15 May 2026, with Copperwick Logistics as controller and BB-Demo as processor. It forms part of the Master Services Agreement. It states no price, availability or response-time figures.
What it is: an executed DPA under the Master Services Agreement signed 15 May 2026. Copperwick Logistics is controller and BB-Demo is processor, covering Salesforce, its transport management system and its support records.
Commits: BB-Demo processes "only on the Customer's documented instructions" and will tell the Customer "without undue delay" of a personal data breach. It will not engage another processor without written authorisation, and will return or delete data at the Customer's choice when services end.
Unusual: the brain runs inside the Customer's own Snowflake account, and the DPA prevails over the MSA on processing of personal data. The breach notice has no fixed hour count.
Not settled: the text names no signatory for Copperwick, only "Authorised signatory". It gives no price, service levels, term or renewal date; those sit in the MSA and order form.
As found in this document
Current to 9 Oct 26- Date signed15 May 2026Source: object_read:doc_030_006
- Processing instructionsBB-Demo will process personal data only on the Customer's documented instructionsBB-Demo will process personal data only on the Customer's documented instructions · Source: object_read:doc_030_006
- Personal data breach noticeBB-Demo will tell the Customer without undue delay after becoming aware of a personal data breachBB-Demo will tell the Customer without undue delay after becoming aware of a personal data breach · Source: object_read:doc_030_006
- Other processorsBB-Demo will not engage another processor to handle personal data without the Customer's general or specific written authorisationBB-Demo will not engage another processor to handle personal data without the Customer's general or specific written authorisation · Source: object_read:doc_030_006
- Return and deletionat the Customer's choice, return or delete personal data it holds on the Customer's behalf, unless the law requires it to be keptat the Customer's choice, return or delete personal data it holds on the Customer's behalf, unless the law requires it to be kept · Source: object_read:doc_030_006
- Data locationbuilt and run inside the Customer's own Snowflake accountbuilt and run inside the Customer's own Snowflake account · Source: object_read:doc_030_006
The document
Body
Copperwick Logistics - Data Processing Agreement (signed)
Status: Executed Version: 1 Signed: 15 May 2026
Parties
This Data Processing Agreement is made between Copperwick Logistics ("the Customer"), acting as controller, and BB-Demo ("BB-Demo"), acting as processor. It forms part of the Master Services Agreement between the same parties signed on 15 May 2026.
Purpose
BB-Demo provides the Customer with the company brain, an AI-queryable layer over the Customer's business systems, including Salesforce, its transport management system and its support records. In doing so BB-Demo may process personal data on the Customer's behalf. This agreement sets out how that processing is carried out.
Definitions
- Personal data: any information relating to an identified or identifiable person that BB-Demo processes on behalf of the Customer under the Master Services Agreement.
- Applicable data protection law: the data protection and privacy law that applies to the Customer's use of the services.
- Services: the services described in the Master Services Agreement.
Scope and Nature of Processing
Read the whole document (4,540 characters)
| Item | Detail |
|---|---|
| Subject matter | Provision of the company brain to the Customer |
| Nature | Indexing, storing, searching and summarising the Customer's business records so that its teams can ask questions of them |
| Data subjects | The Customer's staff, its shippers' contacts and other business contacts held in the connected systems |
| Categories of data | Business contact details, communications, support records and operational records held in the connected systems |
| Duration | The term of the Master Services Agreement and any period needed to return or delete data afterwards |
Instructions
BB-Demo will process personal data only on the Customer's documented instructions, which are the Master Services Agreement, this agreement and the Customer's configuration of the services. If BB-Demo believes an instruction breaches applicable data protection law, it will tell the Customer promptly.
Where the Data Lives
The company brain is built and run inside the Customer's own Snowflake account. The Customer's data is not copied out of that account for BB-Demo's own purposes. BB-Demo staff access it only as far as needed to deliver, support and improve the Customer's service, under the access controls the Customer sets.
Confidentiality
BB-Demo will make sure that everyone authorised to process personal data is bound by a duty of confidentiality and has been trained in handling it appropriately.
Security
BB-Demo will keep appropriate technical and organisational measures in place to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These include access controls, logging of administrative access and separation of customer environments.
Other Processors
BB-Demo will not engage another processor to handle personal data without the Customer's general or specific written authorisation. Where it does, it will bind that processor to obligations no less protective than those in this agreement and remains responsible for that processor's performance.
Assistance
BB-Demo will, taking account of the nature of the processing, help the Customer to:
- respond to requests from individuals exercising their rights;
- meet its security, impact assessment and consultation duties under applicable data protection law; and
- demonstrate compliance, including by answering reasonable audit questions.
Personal Data Breach
BB-Demo will tell the Customer without undue delay after becoming aware of a personal data breach affecting the Customer's personal data, and will give the information the Customer reasonably needs to meet its own obligations.
Return and Deletion
When the services end, BB-Demo will, at the Customer's choice, return or delete personal data it holds on the Customer's behalf, unless the law requires it to be kept. Because the brain runs inside the Customer's Snowflake account, the Customer keeps control of its source data throughout.
Order of Precedence
If this agreement conflicts with the Master Services Agreement on the processing of personal data, this agreement prevails.
Signatures
Signed for and on behalf of BB-Demo
Name: Jordan Pike Title: Account Executive, US Date: 15 May 2026
Signed for and on behalf of Copperwick Logistics
Title: Authorised signatory, Copperwick Logistics Date: 15 May 2026
Unusual terms
Current to 9 Oct 26- DPA prevails over MSA on personal data
- Breach notice without fixed time limit
- Customer signatory unnamed