Legal
Data Processing Addendum
Last updated: July 15, 2026. This page explains our role when we process data on your behalf and provides our processor-signed Data Processing Addendum (DPA).
Our role
When you use Norami, you are the data controller for the business data you upload, and Norami acts as your data processor. We process that data only to provide the service and on your documented instructions, as described in our Privacy Policy.
Download the DPA and EU SCCs
Our version 2026-07-15package includes the DPA and the European Commission's Standard Contractual Clauses, Module Two (controller to processor). It covers our processor obligations, subprocessors, security measures, support for data-subject requests, breach notification, and international transfers.
Download the processor-signed DPA + EU SCCsA self-service customer completes the customer-specific Annex I details through the recorded checkout acceptance. For a negotiated countersigned copy, email privacy@norami.ai with your workspace name and legal business name.
Subprocessors
A current list of the third parties that process data on our behalf is on our Subprocessors page.