Data Processing Addendum (DPA)
This Data Processing Addendum (“DPA”) forms part of the Master Subscription Agreement or Terms of Service between Riven AI Inc. (815 W Market Street, Suite 303, Louisville, KY 40202-2654) and Customer.
1. Scope & Roles: Customer acts as Data Controller; Riven AI Inc. acts as Data Processor with respect to Customer Personal Data processed through Riven Control, Riven Computer, Riven Relay, and the Riven Business Suite.
2. Sovereign Data Residency: Primary inference runs on Riven-operated US hardware (Louisville, KY and US East/Central Blackwell nodes) with encrypted TLS 1.3 transport and AES-256 storage at rest.
3. Subprocessors: Current authorized subprocessors are published continuously at /trust/subprocessors.