Copperwick Logistics - Data Processing Agreement (signed)
Documentexecuted Copperwick Logistics: documents · dpa · executed · 2026-05-15
Executed Data Processing Agreement signed 15 May 2026, with Copperwick Logistics as controller and B-Brain as processor. It forms part of the Master Services Agreement. It states no price, availability or response-time figures.
What it says
What this says
Current to 11 Oct 26Executed Data Processing Agreement signed 15 May 2026, with Copperwick Logistics as controller and B-Brain as processor. It forms part of the Master Services Agreement. It states no price, availability or response-time figures.
What it is: an executed DPA under the Master Services Agreement signed 15 May 2026. Copperwick Logistics is controller and B-Brain is processor, covering Salesforce, its transport management system and its support records.
Commits: B-Brain processes "only on the Customer's documented instructions" and will tell the Customer "without undue delay" of a personal data breach. It will not engage another processor without written authorisation, and will return or delete data at the Customer's choice when services end.
Unusual: the brain runs inside the Customer's own Snowflake account, and the DPA prevails over the MSA on processing of personal data. The breach notice has no fixed hour count.
Not settled: the text names no signatory for Copperwick, only "Authorised signatory". It gives no price, service levels, term or renewal date; those sit in the MSA and order form.
As found in this document
Current to 9 Oct 26- Date signed15 May 2026Source: object_read:doc_030_006
- Processing instructionsB-Brain will process personal data only on the Customer's documented instructionsB-Brain will process personal data only on the Customer's documented instructions · Source: object_read:doc_030_006
- Personal data breach noticeB-Brain will tell the Customer without undue delay after becoming aware of a personal data breachB-Brain will tell the Customer without undue delay after becoming aware of a personal data breach · Source: object_read:doc_030_006
- Other processorsB-Brain will not engage another processor to handle personal data without the Customer's general or specific written authorisationB-Brain will not engage another processor to handle personal data without the Customer's general or specific written authorisation · Source: object_read:doc_030_006
- Return and deletionat the Customer's choice, return or delete personal data it holds on the Customer's behalf, unless the law requires it to be keptat the Customer's choice, return or delete personal data it holds on the Customer's behalf, unless the law requires it to be kept · Source: object_read:doc_030_006
- Data locationbuilt and run inside the Customer's own Snowflake accountbuilt and run inside the Customer's own Snowflake account · Source: object_read:doc_030_006
The document
Body
Unusual terms
Current to 9 Oct 26- DPA prevails over MSA on personal data
- Breach notice without fixed time limit
- Customer signatory unnamed