Enterprise Terms & Data Processing Addendum (DPA)

1. Enterprise Scope and Roles

These terms govern institutional customers utilizing WinSell organization workspaces. Under applicable data protection regulations, Customer acts as the Data Controller, and WinSell acts as the Data Processor.

2. Data Processing Addendum (DPA)

Processing Instructions: WinSell processes customer data solely on documented instructions from the Customer to provide the contracted Services.

Confidentiality: All personnel authorized to access customer data have executed confidentiality agreements and undergone security training.

Sub-processors: WinSell utilizes verified sub-processors (such as AWS and OpenAI Enterprise API) and provides notice of significant sub-processor changes.

Incident Notification: WinSell will notify Customer in writing within 72 hours of becoming aware of any confirmed personal data breach affecting Customer data.

3. Service Level Agreement (SLA)

Enterprise plans feature a 99.9% monthly availability SLA (excluding scheduled maintenance announced at least 24 hours in advance).

Dedicated technical support with a guaranteed initial response time of two (2) hours during regular business hours.

4. Audits and Data Return / Deletion

Customer may request independent security audit summaries demonstrating WinSell's compliance with this DPA.

Upon contract termination, WinSell will return customer data in standard format or securely delete it within 30 days upon written request, subject to statutory retention obligations.