Contrato de Processamento de Dados (DPA)

Festas

Este DPA é celebrado entre a Prilog Inc. ("Operador") e o cliente ("Controlador"). A Prilog Inc. está localizada em 2261 Market Street STE 12675, San Francisco, CA 94114, Estados Unidos.

Contato

Geral: hello@prilog.ai
Suporte: support@prilog.ai
Privacidade e jurídico: privacy@prilog.ai
Endereço: 2261 Market Street STE 12675, San Francisco, CA 94114, Estados Unidos

Escopo

This DPA applies to processing of personal data on behalf of the Responsable when using Prilog.ai, including connected observability, repository, task-routing, chat, support, billing, and AI/model workflows.

Controlador

A entidade que determina as finalidades e os meios de tratamento dos dados pessoais.

Processador

A Prilog Inc. processa dados pessoais em nome do Controlador conforme descrito neste DPA.

Dados do cliente

Personal data submitted to Prilog.ai through the service, integrations, support channels, billing workflows, or authorized AI/model workflows.

Objetivo

Provide Remediação com IA, observability correlation, root-cause summaries, suggested patches, test guidance, pull-request and ticket routing, notifications, billing, support, security, and engineering workflow automation.

Duração

For the term of the agreement and any retention period requested by the Responsable, configured in the service, stated in an order form, or required by law.

Localização

Prilog-controlled service processing occurs in the European Union where available. Customer-enabled integrations, AI/model providers, support, and billing providers may process data in other regions as configured or instructed by the Responsable.

Instruções

Process personal data only on documented instructions from the Responsable, including instructions provided through product settings, connected integrations, support requests, and order forms.

Confidencialidade

Garantir que o pessoal esteja sujeito a obrigações de confidencialidade e seja treinado em proteção de dados.

Assistência

Auxiliar o Controlador com solicitações de titulares de dados, DPIAs e consultas regulatórias.

No model training

Do not use Customer Data to train foundation models or shared model-training datasets. AI/model providers may process prompts, outputs, and context only to provide requested workflows where enabled.

Salvaguardas técnicas

Encryption in transit and at rest, role-based access controls, least privilege, secure authentication, secrets protection, and network controls for systems used to provide the service.

Salvaguardas operacionais

Logging, monitoring, vulnerability and dependency review, access review, respuesta a incidentes procedures, and secure development practices to protect data.

Disponibilidade

Backups e práticas de resiliência adequadas ao serviço.

Subprocessadores principais

Core providers may include AWS or other cloud infrastructure, PostHog EU analytics, Intercom support messaging, ipapi.co locale lookup, Google Fonts/static delivery, Stripe billing and payment processing where paid billing is used, and SSO providers such as Google, Microsoft, and GitHub when selected.

AI and model subprocessors

OpenAI, Anthropic, and customer-configured or self-hosted Ollama-compatible endpoints may process prompts, outputs, and relevant context where the Responsable enables Remediação com IA workflows.

Customer-enabled integrations

Responsable-enabled providers include observability, logging, tracing, error monitoring, cloud logging, archives, event streams, source control, code hosting, issue tracking, chat, notifications, and session-monitoring tools shown in the service or on the integrations page. Examples include Datadog, SigNoz, Grafana, New Relic, Sentry, Honeycomb, Splunk, Elastic, AWS, GCP, Azure, GitHub, GitLab, Bitbucket, Jira, Linear, Slack, Rollbar, Bugsnag, LogRocket, FullStory, Firebase Crashlytics, Instabug, and Embrace.

Mudanças

Notificaremos o Controlador sobre alterações materiais nos subprocessadores e ofereceremos uma oportunidade de oposição.

Assistência

Ajudaremos o Controlador a responder às solicitações do titular dos dados para acessar, excluir ou corrigir dados.

Solicitações diretas

Se recebermos uma solicitação diretamente, encaminharemos o titular dos dados ao Controlador.

Aviso

Notificaremos o Controlador sem demora injustificada após tomarmos conhecimento de uma violação de dados pessoais.

Detalhes

As notificações incluirão informações disponíveis sobre o escopo, o impacto e as etapas de mitigação.

EU-first processing

Prilog-controlled service data is processed in the European Union where available. Transfers outside the EU may occur for customer-enabled integrations, AI/model providers, support, billing, or infrastructure providers based on the Responsable's configuration or the provider's infrastructure.

Salvaguardas

Where international transfers are required, Encargado will use appropriate safeguards such as adequacy decisions, Standard Contractual Clauses, or other lawful transfer mechanisms.

Fim do serviço

Após a rescisão, excluiremos ou devolveremos os dados pessoais conforme as instruções, a menos que a retenção seja exigida por lei.

Auditoria

Forneceremos informações razoáveis para demonstrar conformidade e acomodar auditorias com aviso prévio.

Titulares dos dados

Responsable employees, contractors, authorized users, support contacts, billing contacts, and end users whose data appears in logs, traces, tickets, alerts, repositories, contexto de código, pull requests, support messages, or billing records.

Categorias de dados

Identifiers, contact details, account roles, authentication metadata, IP-derived locale data, log and trace metadata, error events, stack traces, repository metadata, code snippets, pull-request metadata, ticket and issue metadata, integration configuration, tokens, secrets, billing details, usage data, and support communications.

Operações de processamento

Collection, storage, retrieval, transmission, analysis, correlation, classification, remediation drafting, ticket and pull-request creation, notification delivery, support, billing, deletion, and export.

Gerenciamento de acesso

Role-based access controls, least privilege, secure authentication, personnel confidentiality obligations, periodic access review, and audit logging.

Proteção de dados

Encryption in transit and at rest, secure key management, secrets handling, network controls, backup controls, data deletion workflows, and separation between customer workspaces.

Disponibilidade

Procedimentos de backups, monitoramento e recuperação de desastres.

Security operations

Monitoring, respuesta a incidentes, vulnerability and dependency review, secure development practices, and logging appropriate to the service.