NDA signed before any data or system access.
Data processing agreement (Article 28(3) terms) for personal data.
A data-flow note for every integration: which fields go to the model, which are masked, and where logs are stored.
Model provider settings: API tiers whose terms exclude training on your data, where the provider offers them, recorded in the runbook.
API keys and provider agreements stay in your name; least-privilege access for the model; access removed at handover.
How transfers and contracts work
International data transfers: an International Data Transfer Agreement or standard contractual clauses, as your data law requires.
Regional transfer terms: Association of Southeast Asian Nations (ASEAN) Model Contractual Clauses or local transfer clauses where your law asks for them.
Contract: ownership of the delivered work as set out in the contract. A service level agreement (SLA) covers response times. We redo the work at no cost when a delivered integration fails the agreed test cases. Changes are priced first as a change request.