What this agreement is for
It sets how Chikmah processes personal data on behalf of an organisation customer.
Formal purpose and definitions pending counsel.
Data Processing Agreement
For organisations that need a processor agreement. Draft until counsel signs off.
Working draft — pending professional legal review
This page shows Chikmah's working legal text, prepared for counsel sign-off before public launch. Final wording needs review by a lawyer familiar with South African and UK law (including POPIA and UK consumer / data protection rules). Do not treat this text as final or binding until that review is complete.
Roles
The organisation is the controller. Chikmah is the processor for that organisation data.
Controller and processor definitions pending review.
What data is processed
Account, document, voice, photo, and related business records needed to run the service.
Processing schedule pending review.
Security measures
See the Security page for the plain description. Formal technical measures pending counsel.
Security annex pending review. Cross reference /security.
Sub processors
Sub processors will be named honestly in the signed agreement.
Sub processor list pending review.
Data subject rights
We help you respond to access, correction, deletion, and export requests.
Assistance process pending review.
International transfers
Transfers follow reviewed safeguards for Southern Africa and the UK.
Transfer terms pending review.
Breach notification
We notify you plainly and on a stated timeline if a breach affects your data.
Notification timelines pending counsel.
Term and termination
When the agreement ends, we return or delete organisation data as agreed.
Return and deletion terms pending review.
Request a signed copy
Email hello@chikmah.com with DPA in the subject to request a signed copy once counsel finalises it.
Execution process pending review.