Legal

Data Processing Addendum

Last updated: June 21, 2026. This page explains our role when we process data on your behalf and how to request a signed Data Processing Addendum (DPA).

Our role

When you use Norami, you are the data controller for the business data you upload, and Norami acts as your data processor. We process that data only to provide the service and on your documented instructions, as described in our Privacy Policy.

Requesting a DPA

We make a Data Processing Addendum available to customers on request. It covers our processor obligations, the subprocessors we use, the security measures we apply, support for data-subject requests, and breach notification. To request a signed DPA, email privacy@norami.ai with your workspace name.

Subprocessors

A current list of the third parties that process data on our behalf is on our Subprocessors page.