Data Processing Agreement

This DPA applies to all processing of personal data by West TN Consulting on behalf of our clients. It supplements our standard terms of service and privacy policies.

West TN Consulting commits to:

• Process personal data only as instructed by the data controller
• Implement appropriate security measures
• Ensure confidentiality of personnel
• Assist with data subject rights requests
• Maintain records of processing activities
• Notify of data breaches without undue delay

We engage the sub-processors listed below to assist in providing our services. We provide notice of material changes to this list, and clients have the right to object to new sub-processors.

• Amazon Web Services (AWS) — cloud hosting, storage, and AI processing via Amazon Bedrock
• Anthropic — AI model provider (accessed through Amazon Bedrock)
• Vercel — application hosting and delivery
• Supabase — managed database and file storage
• Google — website analytics (Google Analytics)
• Zapier — form submission and workflow routing
• Stripe — payment processing
• Intuit (QuickBooks) — invoicing and payment processing

Each sub-processor is engaged under contractual data-protection terms. To request the most current list, contact us at the address below.

We assist clients in fulfilling data subject rights requests, including:

• Right to access
• Right to rectification
• Right to erasure
• Right to restrict processing
• Right to data portability
• Right to object

Any international data transfers are conducted in compliance with applicable laws and include appropriate safeguards such as Standard Contractual Clauses.