Pemaquid Analytics - Data Processing Agreement (signed)
Documentexecuted Pemaquid Analytics: documents · dpa · executed · 2026-03-18
Executed Data Processing Agreement dated 18 Mar 2026. Pemaquid Analytics is controller and BB-Demo is processor for the company brain subscription. It sets no price or service levels and keeps Customer Data inside the customer's Snowflake account.
What it says
What this says
Current to 11 Oct 26Executed Data Processing Agreement dated 18 Mar 2026. Pemaquid Analytics is controller and BB-Demo is processor for the company brain subscription. It sets no price or service levels and keeps Customer Data inside the customer's Snowflake account.
What it is: an executed DPA that forms part of the Master Services Agreement and the Order Form. Signed on 18 Mar 2026 by Sophie Ling for BB-Demo and an unnamed authorised signatory for Pemaquid Analytics.
Commits: BB-Demo must "process Customer Data only on the Customer's documented instructions" and "keep Customer Data inside the Customer's Snowflake account". It must notify breaches "without undue delay" and allow audits on reasonable notice.
Unusual: nothing off standard. Sub-processors are under general authorisation with reasonable notice of change, and this DPA prevails over the Master Services Agreement on personal data processing.
Not settled: no price, service levels, term, renewal date or breach notification deadline in hours. The customer signatory's name and role beyond "Authorised signatory" are not shown.
As found in this document
Current to 9 Oct 26- Date signed18 Mar 2026Source: object_read:doc_087_006
- Date start18 Mar 2026Source: object_read:doc_087_006
- Processing instructionsprocess Customer Data only on the Customer's documented instructionsprocess Customer Data only on the Customer's documented instructions · Source: object_read:doc_087_006
- Data locationkeep Customer Data inside the Customer's Snowflake account and not move it elsewhere without the Customer's written agreementkeep Customer Data inside the Customer's Snowflake account and not move it elsewhere without the Customer's written agreement · Source: object_read:doc_087_006
- Breach notificationnotify the Customer without undue delay after becoming aware of a personal data breachnotify the Customer without undue delay after becoming aware of a personal data breach · Source: object_read:doc_087_006
- Auditallow and contribute to audits by the Customer or an auditor it appoints, on reasonable notice, during business hoursallow and contribute to audits by the Customer or an auditor it appoints, on reasonable notice, during business hours · Source: object_read:doc_087_006
- Return and deletionat the Customer's choice, return or delete Customer Data and remove the brain's indexes and derived data, unless law requires retentionat the Customer's choice, return or delete Customer Data and remove the brain's indexes and derived data, unless law requires retention · Source: object_read:doc_087_006
- Sub-processorsreasonable notice of any intended change so that the Customer may object on reasonable groundsreasonable notice of any intended change so that the Customer may object on reasonable grounds · Source: object_read:doc_087_006
The document
Body
Pemaquid Analytics - Data Processing Agreement (signed)
Status: Executed Version: one Effective date: 18 Mar 2026
Parties
This Data Processing Agreement is made between:
- Pemaquid Analytics, Boston, the "Customer", acting as controller of the personal data processed under the Agreement; and
- BB-Demo, London, the "Supplier", acting as processor of that personal data.
It forms part of the Master Services Agreement and the Order Form agreed between the parties for the Company Brain subscription.
Background
The Supplier provides the company brain: a queryable layer over the Customer's business systems, built and run inside the Customer's own Snowflake account. In providing the service the Supplier may process personal data on the Customer's behalf. This agreement sets out how that processing is carried out.
Definitions
Terms such as "personal data", "processing", "controller", "processor" and "data subject" have the meanings given in the applicable data protection law. "Customer Data" means all personal data processed by the Supplier on the Customer's behalf under the Agreement.
Scope and purpose of processing
Read the whole document (5,315 characters)
| Item | Description |
|---|---|
| Subject matter | Provision of the company brain subscription and related implementation and support |
| Nature of processing | Connecting, indexing, storing, searching and presenting data from the Customer's connected systems |
| Purpose | To deliver the services described in the Order Form |
| Categories of data subject | The Customer's employees, contractors, customers and prospects, and their distributor contacts |
| Types of personal data | Business contact details, communications content, support ticket content, usage records and account information held in the connected systems |
| Duration | The term of the Agreement and any period needed to return or delete Customer Data |
Processor obligations
The Supplier shall:
- process Customer Data only on the Customer's documented instructions, which include the Agreement and this DPA, unless required to do otherwise by law, in which case it will tell the Customer first where permitted;
- ensure that everyone authorised to process Customer Data is bound by a duty of confidentiality;
- keep Customer Data inside the Customer's Snowflake account and not move it elsewhere without the Customer's written agreement;
- apply appropriate technical and organisational measures to protect Customer Data, including access controls, encryption and logging of administrative access;
- help the Customer respond to requests from data subjects, taking into account the nature of the processing;
- help the Customer meet its obligations on security, breach notification, impact assessments and prior consultation, so far as they relate to the services.
Customer obligations
The Customer confirms that it has a lawful basis to instruct the Supplier to process Customer Data, that its instructions comply with applicable law, and that it controls which systems are connected to the brain and which users have access.
Sub-processors
The Customer gives general authorisation for the Supplier to use sub-processors. The Supplier shall impose data protection obligations on each sub-processor that are no less protective than those in this DPA, remains responsible for their performance, and will give the Customer reasonable notice of any intended change so that the Customer may object on reasonable grounds.
International transfers
Where processing involves a transfer of personal data between the United Kingdom, the European Economic Area and the United States, the parties shall rely on an appropriate lawful transfer mechanism and will cooperate to put in place any additional terms that law requires.
Personal data breach
The Supplier shall notify the Customer without undue delay after becoming aware of a personal data breach affecting Customer Data, and shall provide the information reasonably needed for the Customer to meet its own notification duties. The Supplier will take prompt steps to contain and remediate the breach.
Audit and information
The Supplier shall make available the information reasonably necessary to demonstrate compliance with this DPA and shall allow and contribute to audits by the Customer or an auditor it appoints, on reasonable notice, during business hours and subject to sensible confidentiality terms.
Return and deletion
On termination or expiry of the Agreement, the Supplier shall, at the Customer's choice, return or delete Customer Data and remove the brain's indexes and derived data, unless law requires retention. Because the brain runs in the Customer's own Snowflake account, the Customer retains control of the underlying data throughout.
Liability and precedence
Liability under this DPA is subject to the limitations set out in the Master Services Agreement. If this DPA conflicts with the Master Services Agreement on the processing of personal data, this DPA prevails.
Signatures
Executed by the parties on 18 Mar 2026.
| Pemaquid Analytics | BB-Demo | |
|---|---|---|
| Signature | Signed | Signed |
| Name | Authorised signatory | Sophie Ling |
| Title | Authorised signatory, Pemaquid Analytics | Account Executive |
| Date | 18 Mar 2026 | 18 Mar 2026 |