Legal

Data Processing Agreement

Effective August 22, 2026 · PathFi LLC · Draft for review · Applies to Teams and business plans

When this applies

If your organization uses PathFi on a Teams or business plan and your team’s simulations include personal data your organization controls, this agreement governs how PathFi processes that data on your behalf. It supplements the Terms of Service; for individual accounts, the Privacy Policy is the governing document.

Roles

Your organization is the data controller: you decide what goes into a simulation and why. PathFi is the data processor: we process it only to run the simulations and features your team requests, on your documented instructions, and never for our own purposes.

What we process

The questions and context your team submits, data from connections your team authorizes (read-only), and account data for your seats. Nothing is used to train AI models; our AI providers are bound by the same bar.

Subprocessors

We use a short list of subprocessors: AWS (hosting, US), Stripe (billing), our AI providers, and our web-search provider. The current list is available on request; we’ll notify you before adding one, with the right to object.

Security

Encryption in transit and at rest, credentials held in a dedicated key store, least-privilege access, and no standing human access to customer data. Details on the Security page.

Breach notification

If a personal-data breach affects your organization’s data, we notify you without undue delay and no later than 72 hours after becoming aware, with what we know and what we’re doing.

Deletion and return

On termination, or on your instruction, we delete or return your organization’s data within 30 days, except what the law requires us to keep. Your admins can delete individual simulations anytime.

Transfers

Processing happens in the United States. For data from the EU, UK, or Switzerland, the EU Standard Contractual Clauses (and the UK addendum) are incorporated into this agreement.

Audits and assistance

We’ll provide the information reasonably needed to demonstrate compliance, assist with data-subject requests that reach you, and support impact assessments where required.

Getting a signed copy

A countersignable copy of this agreement is available for Teams and business customers: legal@pathfi.ai.