Data Processing Addendum

1. Purpose & Scope

This Data Processing Addendum ("DPA") supplements the AI Sage Terms of Service and applies to the processing of Customer Personal Data in connection with the AI Sage runtime control plane, observability infrastructure, and SDK services.

2. Roles & Responsibilities

The customer acts as the Data Controller (or Processor on behalf of third parties), and AI Sage acts as the Data Processor. AI Sage processes Customer Personal Data solely to provide, secure, and maintain the control plane services in accordance with customer instructions.

3. Security Measures

AI Sage maintains technical and organizational measures to safeguard data, including:

• Encryption of data in transit (TLS 1.3) and at rest (AES-256).
• Agent-level Role-Based Access Control (RBAC) and strict environment isolation.
• Automated client-side data redaction filters before trace transmission.
• Continuous vulnerability scanning and audit logging.

4. Sub-processors

AI Sage engages vetted third-party sub-processors (cloud hosting providers, database infrastructure, and analytics services) to support service delivery. A list of current sub-processors is available upon request.

5. Inquiries & Executed DPA Requests

For custom executed DPA agreements or compliance requests, contact our privacy team: