LEGAL & COMPLIANCE DOSSIER
Data Processing Agreement
Effective Date: August 19, 2026
- Standard UK GDPR Article 28 Data Processing Agreement for regulated professional practices.
- Codifies UK (London) data residency, hardware-isolated clean rooms, and Customer Master Key sovereignty.
1. Scope and Roles (UK GDPR Article 28)
This Data Processing Agreement ("DPA") forms part of the Master Services Agreement between the Client ("Data Controller") and Sentivox ("Data Processor") and governs the processing of Personal Data within the Sentivox Platform in accordance with Article 28 of the UK GDPR.
In Plain English
This agreement sets out our formal UK GDPR duties as your Data Processor while your firm remains the Data Controller.
2. Processing Instructions & Clean-Room Containment
Sentivox shall process Personal Data solely on the documented instructions of the Client. All active document parsing and AI reasoning occur inside volatile, hardware-encrypted memory (RAM) within UK enclaves that have no outbound route to the public internet. Working memory buffers are overwritten immediately upon task completion, and Customer Data is never used to train any AI model.
In Plain English
We only process data on your instructions inside sealed UK clean rooms. Working memory is wiped after every task, and your data never trains AI models.
3. Technical & Organisational Security Measures (Article 32)
Sentivox enforces four core technical safeguards: (i) client-side encryption prior to network transit; (ii) AMD SEV-SNP hardware memory isolation during active processing; (iii) dedicated UK database storage encrypted under the Client’s Customer Master Key (Microsoft Azure Key Vault or Google Cloud KMS); and (iv) role-based access controls synced with the Client’s corporate directory alongside a 7-year Write-Once-Read-Many (WORM) compliance log.
In Plain English
We protect your files with browser encryption, hardware-locked clean rooms, your own master encryption key, and a permanent 7-year compliance log.
4. Approved Sub-Processor Registry
To deliver the underlying UK physical data-centre hosting and billing administration, Sentivox engages only the following sub-processors:
1. Google Cloud EMEA Ltd (GCP)
Role: Physical UK Data-Centre Infrastructure & Confidential Compute Hardware (Zero Plaintext Access)
Location: London, United Kingdom (europe-west2)
2. Stripe Payments UK Ltd
Role: Subscription Invoicing & Payment Administration (No Access to Vault Data)
Location: United Kingdom
No third-party AI model provider acts as a sub-processor for your private clean-room workspace. Sentivox will provide at least 30 days’ written notice prior to any change to this registry.
1. Google Cloud EMEA Ltd (GCP)
Role: Physical UK Data-Centre Infrastructure & Confidential Compute Hardware (Zero Plaintext Access)
Location: London, United Kingdom (europe-west2)
2. Stripe Payments UK Ltd
Role: Subscription Invoicing & Payment Administration (No Access to Vault Data)
Location: United Kingdom
No third-party AI model provider acts as a sub-processor for your private clean-room workspace. Sentivox will provide at least 30 days’ written notice prior to any change to this registry.
In Plain English
We only use Google Cloud in London for the physical server hardware (they cannot read your encrypted files) and Stripe for billing. No outside AI company touches your clean-room data.
5. Audit Rights, Insurer Evidence & Cryptographic Erasure
Sentivox provides the Client’s Compliance Officer, statutory auditors, and Professional Indemnity Insurance (PII) underwriters with architectural documentation and immutable 7-year audit logs to verify compliance.
Upon termination of the Agreement or at the Client’s direction, the Client may revoke their Customer Master Key—rendering all stored ciphertext mathematically unrecoverable immediately—and Sentivox shall permanently purge all tenant storage containers within 24 hours.
Upon termination of the Agreement or at the Client’s direction, the Client may revoke their Customer Master Key—rendering all stored ciphertext mathematically unrecoverable immediately—and Sentivox shall permanently purge all tenant storage containers within 24 hours.
In Plain English
We provide full compliance evidence for your regulators and insurers, and when you leave or turn off your master key, your data is permanently erased.