Ardcarne Life Assurance - Data Processing Agreement (signed)
Documentexecuted Ardcarne Life Assurance: documents · dpa · executed · 2026-09-04
Executed Data Processing Agreement between Ardcarne Life Assurance (controller) and B-Brain (processor), signed 4 Sep 2026. The brain runs inside Ardcarne's own Snowflake account, with DORA support. It states no price, availability or P1 response figures.
What it says
What this says
Current to 11 Oct 26Executed Data Processing Agreement between Ardcarne Life Assurance (controller) and B-Brain (processor), signed 4 Sep 2026. The brain runs inside Ardcarne's own Snowflake account, with DORA support. It states no price, availability or P1 response figures.
What it is: an executed DPA under the MSA and order form, signed 4 Sep 2026. It says "If there is a conflict on the handling of personal data, this Agreement prevails."
Commits: B-Brain processes data only on documented instructions and keeps it in the customer's Snowflake account and chosen region. It must notify a Security Incident "without undue delay" and tell the customer in writing before changing a sub-processor.
Unusual: it ties B-Brain to DORA ICT third-party risk support and to audits by the customer or its appointed auditor. Any move to another region or dedicated residency needs a written change to the order form.
Not settled: no price, service levels, connector dates or renewal date appear here; they sit in the order form and MSA. The customer signatory is not named, only an authorised signatory.
As found in this document
Current to 9 Oct 26- Date signed4 Sep 2026Source: object_read:doc_008_009
- Date start4 Sep 2026Source: object_read:doc_008_009
- Data locationPersonal Data stays within that account and the region the Customer has selected.Personal Data stays within that account and the region the Customer has selected. · Source: object_read:doc_008_009
- Security incident noticeThe Supplier will notify the Customer without undue delay after becoming aware of a Security IncidentThe Supplier will notify the Customer without undue delay after becoming aware of a Security Incident · Source: object_read:doc_008_009
- Sub-processor changeThe Supplier will tell the Customer in writing before adding or replacing a sub-processorThe Supplier will tell the Customer in writing before adding or replacing a sub-processor · Source: object_read:doc_008_009
- Return and deletionOn ending the Services the Supplier will, at the Customer's choice, return or delete Personal Data.On ending the Services the Supplier will, at the Customer's choice, return or delete Personal Data. · Source: object_read:doc_008_009
- Termcontinues for as long as the Supplier processes Personal Data for the Customercontinues for as long as the Supplier processes Personal Data for the Customer · Source: object_read:doc_008_009
The document
Body
Unusual terms
Current to 9 Oct 26- DORA ICT third-party risk support
- Audit rights for customer or appointed auditor
- Irish governing law
- Region change needs order form amendment