DPA Template Placeholder — TATC Co., Ltd.

This is a placeholder for the full Data Processing Agreement.
The countersigned DPA is provided with your service agreement.

Key terms (summary — see /legal/dpa on the website):
- Roles: TATC Co., Ltd. (Tax Reg. No. 0135567035437) as controller / processor
  as defined per service; sub-processors: Feishu (Lark International) for
  SMTP email only; off-platform model providers for models hosted upstream.
- Data residency: Thailand (Pathum Thani) for compute, token traffic and
  storage. No cross-border transfer of personal data without separate consent
  or lawful exemption under the PDPA.
- Security: single-tenant isolation, TLS, encrypted backups, RBAC with audit
  logs, 24/7 NOC.
- Breach: notification to the PDPC and affected data subjects per Section 30
  of the PDPA (process timeline: /legal/breach).
- Returns/deletion: per your service agreement; NVMe crypto-erase certificate
  available on bare-metal decommissioning.

Contact: info@tatc.cloud (DPO) · https://www.tatc.cloud/legal/dpa