Data Processing Agreement (DPA)

This Data Processing Agreement ("DPA") forms part of the service agreement between Meru Software and its clients.

1. Roles

Client = Data Controller
Meru Software = Data Processor

2. Processing Purpose

Processing of personal data solely for provision of agreed software development and IT services.

3. Security Measures

• Encrypted communications
• Secure cloud infrastructure
• Restricted access control
• Regular vulnerability assessment

4. Sub-Processors

Meru Software may engage cloud providers and hosting partners under confidentiality agreements.

5. Data Subject Rights

Meru Software shall assist the client in fulfilling GDPR obligations.

6. International Transfers

Transfers outside EU/UK shall follow Standard Contractual Clauses (SCCs).

7. Termination

Upon termination, data shall be deleted or returned as instructed.

© 2026 Meru Software