Data Processing Agreement

Last updated: July 2026

1. Roles

Strategic Innovations AI acts as a Data Processor on behalf of the Customer (Data Controller). The Customer retains ownership and control of all email data processed through Catalyst Mail.

2. Scope of processing

We process email content for the purposes of: AI-assisted triage, summarization, draft generation, and CRM pipeline tracking. We do not process data for any other purpose without explicit consent.

3. Sub-processors

Cloudflare (edge compute, D1, KV, Workers AI) — Cloudflare GDPR compliance. No other sub-processors are used.

4. Data security

All data is encrypted in transit (TLS 1.3) and at rest (Cloudflare-managed). Authentication is passwordless (magic-link). No passwords or credentials are stored. See our Security page.

5. Data deletion

Upon account deletion or request, all customer data is purged within 30 days. Immediate deletion is available via the in-app delete tool.

6. Contact

For DPA execution or questions: legal@strategic-innovations.ai